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Abstract 

The present thesis deals with various methods of quantum error correction. It is di- 
vided into two parts. In the first part, dynamical decoupling methods are considered 
which have the task of suppressing the influence of residual imperfections in a quantum 
memory. Such imperfections might be given by couplings between the finite dimensional 
quantum systems (qudits) constituting the quantum memory, for instance. The sup- 
pression is achieved by altering the dynamics of an imperfect quantum memory with 
the help of a sequence of local unitary operations applied to the qudits. Whereas up to 
now the operations of such decoupling sequences have been constructed in a determin- 
istic fashion, strategies are developed in this thesis which construct the operations by 
random selection from a suitable set. Formulas are derived which estimate the average 
performance of such strategies. As it turns out, randomized decoupling strategies offer 
advantages and disadvantages over deterministic ones. It is possible to benefit from the 
advantages of both kind of strategies by designing combined strategies. Furthermore, it 
is investigated if and how the discussed decoupling strategies can be employed to protect 
a quantum computation running on the quantum memory. It is shown that a purely 
randomized decoupling strategy may be used by applying the decoupling operations and 
adjusted gates of the quantum algorithm in an alternating fashion. Again this method 
can be enhanced by the means of deterministic methods in order to obtain a combined 
decoupling method for quantum computations analogously to the combining strategies 
for quantum memories. 

The second part of the thesis deals with quantum error-correcting codes and protocols 
for quantum key distribution. The focus is on the BB84 and the 6-state protocol making 
use of only one-way communication during the error correction and privacy amplification 
steps. It is shown that by adding additional errors to the preliminary key (a process 
called noisy preprocessing) followed by the use of a structured block code, higher secure 
key rates may be obtained. For the BB84 protocol it is shown that iterating the combined 
preprocessing leads to an even higher gain. In order to speed up the numerical evaluation 
of the key rates, results of representation theory come into play. If a coherent version 
of the protocol is considered, the block code used in the preprocessing stage becomes a 
concatenated stabilizer code which is obtained by concatenating an outer random code 
with an inner deterministic one. This concatenated stabilizer code is used to compute 
an improved lower bound on the quantum capacity of a certain quantum channel (the 
so-called qubit depolarizing channel). 
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Zufallsbasierte dynamische Entkopplungsmethoden und 
verbesserte Schlusselraten fur die Quantenkryptographie 
mit Einwegkommunikation 



Zusammenfassung 

Die vorliegcndc Arbeit bcfaJBt sicli mit verschiedencn Mctliodcn dcr Quantenfehlcrkorrek- 
tur. Sic ist in zwci Tcilc gcglicdcrt. Im ersten Toil wcrdcn dynamische Entkopplungsme- 
thoden betrachtet, welche die Aufgabe haben, den Einflul3 verbleibender UnvoUkommen- 
heiten in einem Quantenspeicher zu unterdriicken. Seiche Unvollkonimenheiten sind z. B. 
gegeben durch Kopplungen zwischen den einzelnen endhchdimensionalen Quantensyste- 
men (Qudits), welche zusammen den Quantenspeicher bilden. Um die Unterdriickung 
zu realisieren, wird die Dynamik eines fehlerbehafteten Quantenspeichers mit Hilfe einer 
Sequenz von lokalen unitaren Operationen, die auf die einzelnen Qudits angewandt wer- 
den, modifizicrt. Wahrcnd die Operationen einer solchen Entkopphingsscquenz bislang 
deterministisch ausgewahlt wurden, werden in dieser Arbeit Strategien entwickelt, wel- 
che die Operationen durch zufallige Auswahl aus einer geeigneten Menge bestimmen. Es 
werden Formeln hergeleitet, welche die mittlere Leistung solcher Strategien abschatzen. 
Dabei zeigt sich, daB die zufallsbasierten dynamische Entkopplungsstrategien gegeniiber 
den deterministischen Vor- und Nachteile bieten. Es ist moglich von den Vorteilen bei- 
der Arten von Strategien zu profitieren, indem man geeignete kombinierte Strategien 
entwickelt. Weiterhin wird untersucht, inwiefern sich die diskutierten Entkopplungsstra- 
tegien einsetzcn lassen, um eine auf dcm Quantenspeicher laufende Quantenrechnung 
zu schiitzen. Es wird gezeigt, daB sich eine rein zufallsbasierte Entkopplungsmethode 
verwenden lafit, indem speziell angepafite Gatter des zu rechnenden Quantenalgorith- 
mus und Entkopplungsoperationen abweehselnd angewandt werden. Diese Methode lafit 
sich wiederum mittels dcterministischcr Verfahren erweitern um analog zu den kombi- 
nierten Enkopplungsstrategien fiir Quantenspeicher kombinierte Entkopplungsmethoden 
fiir Quantenrechner zu erhalten. 

Im zweitcn Toil dcr Arbeit gcht es um quantenfehlerkorrigierende Codes und quan- 
tenkryptographische Protokolle. Es wird das BB84- und das 6-State-Protokoll zur siche- 
ren Schliisselverteilung unter Verwendung von Einwegkommunikation wahrend der Feh- 
lerkorrektur und Privatsparhenverstarkung betrachtet. Es wird gezeigt, dafi durch das 
nachtragliche Hinzufiigen von Fehlern im vorlaiifigen Schliisscl (,,noisy preprocessing") in 
Verbindung mit der Nutzung eines bestimmten Blockcodes hohere Schliisselraten erzielt 
werden konnen. Fiir das BB84-Protokoll wird weiter gezeigt, dafi sich die erzielten Vor- 
teile verstarken lassen, falls das kombinierte „preprocessing" iterativ verwendet wird. Die 
numerische Berechnung der jeweiligen Schliisselraten wird dabei durch das Verwenden 
von Resultaten der Darstellungstheorie beschleunigt. Bei einer koharenten Betrachtung 
der Protokolle entspricht der verwendete Blockcode einem verketteten Stabilizer-Code, 
bei dem ein aufierer zufalliger Code mit einem deterministischen inneren Code verkettet 
wird. Mittels dieses verketteten quantenfehlerkorrigierenden Codes wird eine verbesser- 
te untere Schranke fiir die Quantenkapazitat eines bestimmten Quantenkanals (genannt 
„qubit depolarizing channel") berechnet. 
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1 Introduction and Preliminaries 



1.1 Introduction and Outline 



Quantum mechanics is a theory which appears rather counterintuitive: For instance, certain variables of 
a quantum mechanical system like position and momentum cannot both be determined with arbitrary 
accuracy, p article s might penetrate a barrier (tunnel effect), and cats might be dead and alive at the 



same time Sch35| . Quantum information theory tries to generalize classical information theory to the 
quantum world by considering a quantum mechanical two-level system (a qubit) as basic information 
carrier. It turns out that the properties of quantum information, i. e. the information encoded in a 
quantum system, are in strong contrast to the properties we now about classical information: While 
classical information can be copied perfectly (resulting in the enormous su ccess of file sha ring networks), 
quantum information, in general, cannot be copied (no cloni ng theorem [PieSj lwZ8^ ). Although it 
cannot be duplicated, quantum information may be teleported BBC"'"93l | by using distributed entangled 
states as a resource. During the last two and a half decades the idea emerged to use quantum mechanics 
to implement technical applications which might not exist in a purely classical world. Two particularly 
important concepts are quantum computing (promising faster computation) and quantum cryptography 
(promising unconditionally secure communication). 

The first example of a quantu m algo rithm that is more efficient than any possible classical algorithm 
is the Deutsch-Jozsa algorithm DJ92| . Given a black box quantum computer known as an oracle that 
implements a binary function which is either constant or balanced, the algorithm is able to determine 
if the function is constant or balanced by using the oracle only once. By contrast, a classical computer 
might have to use a corresponding classical oracle on more than half the input values in the worst case. 
The reason behind this speedup is the quantum parallelism which arises from the ability of a quantum 
memory to exist in a coherent superposition of states. While the Deutsch-Jozsa algorithm is merely 
of academic interest, the potential of quantum computing drew lots of attention in 1 994 wh en Shor 
presented polynomial-time algorithms for prime factorization and discrete logarithms Sho94| due to 
their potential to break current cryptosystems: Nearly all current cryptosystems can be divided into 
two families. One family is based on the assumption that an efficient algorithm for prime factorization 
does not exist (an example is the RSA public key encryption protocol RSAT^), while the other one is 
based on the assumption that computation of the discrete logarithm is hard (examples are t he Diffi e- 
Hellman key distribution protocol DH7d | and the Elgamal public key encryption protocol [ElgSSj p. 
The security of such cryptosystems is then provided by the fact that an eavesdropper with limited 
computational power is unable to solve these hard problems. With Shor's algorithms the only reason 
that current cryptosystems can still be considered save is the tremendous difficulty to build a working 
quantum computer. While the factorization of the number 15 = 3 x 5 has been demonstrated on an 



nuclear magnetic resonance (NMR) quantum comp uter co nsisting of 7 qubits |VSB"'"Olj . factorization 
of a 1024 bit number requires about 2000 qubits IPZOSj and is completely out of range of current 
technology. 

The main obstacle in the realization of a quantum computer is a process called decoherence which 
arises from an interaction of the quantum information carriers with the environment and which destroys 
any coherent superpositions on a very short time scale. But even if the quantum computer could be 
perfectly isolated, it still has to be accessible to perform manipulations (quantum gates) with very 
high accuracy. In addition, any imperfections and interactions between the finite-dimensional quantum 
information carriers (qudits) constituting the quantum memory of the quantum computer tend also 



1 



1 Introduction and Preliminaries 



to shorten the time scale of rehable quantum computation. A way out might be the use of quantum 
error-correcting t echniqu es: One technique is to employ quantum error-correcting codes, introduced 
by Shor in 1995 |Sho95l | . By encoding the quantum information in a subspace of the total available 
space, they allow a recovery step involving a syndrome mea surement to rev erse certain decoherence 
processes. Another technique is called dynamical decoupling Zan99t |VKL99|. It alters the dynamics 
of a quantum memory by applying a series of local unitary operations to the qudits. If the couplings 
to the environment effectively cancel out in the resulting dynamics, decoher ence is suppressed. This 
technique is inspired by refocusing techniques in NMR spectroscopy [EBW87 1 . 

While on the one hand quantum mechanics seems to question the security of established classical 
cryptosystems, on the other hand it provides key distribution protocols whose security does not rely 
on any unproven assumption but is guaranteed by the validity of quantum mechanics itself. The 
idea of quantum key distribution (QKD) is due to Bennett and Brassard who, inspir ed by a paper 
of Wiesner written in the late 60's and not accepted for publication until 1983 WieSSj . invented the 
first QKD protocol (now called BB84 protocol) in 1984 BB8J]. To establish a secret key between 
two distant parties connected via a quantum channel and an authenticated classical channel, a QKD 
protocol demands one party (usually called Alice) to send non-orth ogonal quantum states to the other 
party (usually called Bob) . The no cloning theorem [Die82l : |WZ82| prevents an eavesdropper with full 
access to the quantum channel from copying these states in a perfect manner. Hence any action of 
an eavesdropper leaves traces in the transmitted states which can be recognized by Alice and Bob by 
comparing measurement and preparation data of a subset of randomly chosen check states. Thereby, 
one takes the conservative point of view that any noise in the channel is caused by an eavesdropper. As 
long as the action of an eavesdropper seems harmless enough (i. e. as long as the detected error rate 
is low enough), Alice and Bob should be able to generate a random, correct and secure key from their 
raw data. A security proof for a QKD protocol typically gives a lower bound on the length of the secret 
key that can be obtained from the raw data for a given error rate. While it is still in question whether 
it will ever be possible to build la rge-sc ale quantum computers, the first generation of QKD systems 
is already available commercially [OKD^ . The reason that a QKD system is so much easier to build 
than a quantum computer is that it shares only the need to prepare and measure quantum systems but 
does not need to store and manipulate them. Since the key rates of such devices are typically low, it is 
important to find security proofs which allow the secure key generation rate for a given error rate to be 
as high as possible. 

The goal of this thesis is to develop improved dynamical decoupling techniques in order to contribute 
to the field of quantum computing and to provide improved secret key generation rates for quantum 
key distribution protocols in order to contribute to the field of quantum cryptography. To achieve 
this goal, the thesis deals with different kinds of quantum error correction: Part I of the thesis studies 
the potential of randomized dynamical decoupling strategies which are able to stabilize a quantum 
memory and even a running quantum computation against residual imperfections and interactions. 
Part II of the thesis considers quantum error-correcting codes which are used to compute improved 
lower bounds on the capacity of the qubit depolarizing channel. Furthermore, these co des are used to 
obtain improved secret key rates for variants of QKD protocols like the BB84 protocol [ BB84j and the 
6-state protocol Bru98| . The later protocol is a natural extension of BB84, which makes use of four 
different quantum states, and makes use of two additional quantum states. A more detailed introduction 
and outline is given in the following subsections. 



1.1.1 Part I: Random Decoupling 

In order to use a quantum system as a quantum memory, or even more demanding, to use it for quantum 
computations, we must be able to apply some kind of control. Let us assume that the quantum system 
is a quantum register formed by a set of qudits. Usually the experimentally easiest kind of control 
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is to apply single qudit gates realized by a local control Haniiltonian. Dynamical control of a local 
Hamiltonian allows the time evolution of a quantum system to be modified. A well known example 
is given by the refocusing techniques used to manipulate nuclear spin Hamiltonians EBW87l |. There 
are various possible controls tasks: For example, for a closed quantum system, we might want to 
simulate a t ime evolu tion according to a Hamiltonian which is different from the system Hamiltonian 
WRJB02at IBDNB04| . In particular, we might want to simulate a vanishing Hamiltonian, a task we 



call decoupling from now on. For an open quantum s ystem, we migh t try to suppress decoherence by 
simulating vanishing coupli ngs with the env ironment ZanQQt IVKL99l | , or we might try to generate at 
least a noiseless subsystem ZanOO : VKLOd j . In the simplest control scenario, the so-called bang-bang 
control scenario, the local control Hamiltonian generates a set of pulses belonging to a suitable control 
scheme instantaneously. Then, for all control tasks, the fundamental deterministic control strategy is 
to apply the pulses belonging to the control scheme in a cyclic manner over and over again. T he contro l 
scheme is designed in such a way that, in lowest order average Hamiltonian theory (AHT) EBW87|, 
the resulting dynamics corresponds to the Hamiltonian to be simulated. Assuming the pulses to be 
ideal, the finite time interval At in between subsequent pulses is the only obstacle preventing a control 
task to be achieved in a perfect manner. 

One of the goals of part I of this thesis is to devise and analyze improved control strategies which lead 
to a better performance for a fixed time interval At, or in other words, which lead to a suppression of 
the residual higher order terms in AHT. Let us focus for now on the control task of decoupling a closed 
quantum system. In the context of decoupling, a control scheme is said to be a decoupling scheme. 
As we will see, the fundamental deterministic control strategy leads to an average fidelity decay which 
is quadratic in time. Thereby, the strength of the decay is determined by the strength of the system 
Hamiltonian, by the size of the decoupling scheme, and by the time interval At in between subsequent 
pulses. For example, an improved strategy commonly used by the NMR community is a symmetrized 
version of the fundamental strategy: In spite of doubling the size of the decoupling scheme, it leads to 
a decrease of the strength of the fidelity decay but keeps its quadr atic- in-t ime nature. An interesting 
result, first observed in the author's diploma thesis ^Ker04j] (see also KAS05|), is that a control strategy 
based on random selection of the elements of a decoupling scheme leads to a fidelity decay which is 
only linear in ti me. Sub sequently, randomized decoupling was proposed for open quantum systems by 
Viola and Knill VK05[, w ho con fi rmed t he linear- in-time decay by constructing a strict lower bound 
for the worst case fidelity VK05t |Vio05|. Meanwhile control strategies combin ing the advantages of 
purely det ermini s tic an d randomized strategies have been devised by the author KAOSf and by Santos 
and Viola [SVOdlvSO^ 



Since, in general, the pulses of a decoupling sequence interfere with the application of an additional 
Hamiltonian implementing a quantum gate, the protection of a running quantum computation against 
imperfections of the quantum memory is not straightforward [VL.K99J . Another goal of this thesis is to 
study how the devised decoupling strategies might be used in order to protect quantum computations. 
In the bang-bang control scenario, one option for deterministic strategies is to apply quantum gates 
instantaneously in between completed decoupling cycles. Under the more realistic assumption that 
quantum gates (especially two-qudit gates) are generated within a finite time interval by the means of 
bounded controls, more advanced techniques are required in order to combine decou pling an d computa- 
tion. For instance, the dynamically corrected gate (DCG) of Khodjasteh and Viola [KVOO*! combines a 
single decoupling cycle with the generation of a quantum gate. It turns out that the decoupling pulses of 
a randomized decoupling strategy can be alternated with especially adjusted quantum gates, a method 
which was called Pauli random error correction (PAREC) by the author and collaborators KAS05 |. 
In order to benefit from the advantages of both methods, DCGs might be combined with the PAREC 
method. Another scenario arises if the two-qudit gates of a quantum computer are generated by the 
couplings between adjacent qudits. In this case a selective decoupling method is used which switches 
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off all but the desired coupling. The fundamental selective decoupling strategy can be improved by 
combining it with a randomized decoupling strategy. 

Outline 

Chapter!^ Dynamical Decoupling. Chapter [5] deals with dynamical decoupling strategies for quan- 
tum memories in the bang-bang control scenario. In order to improve the fundamental deterministic 
decoupling strategy, new randomized strategies are considered. The performance of these strategies is 
analyzed by (i) deriving formulas expressing the average fidelity and (ii) by considering the variance 
of the fidelity. The chapter closes with a numerical simulation of any strategy on a quantum memory 
pe rturbed by Heisenberg interactions. The idea of the embedded decoupling strategy was published 



KAOg: 



O. Kern and G. Alber. 

Controlling Quantum Systems by Embedded Dynamical Decoupling Schemes. 
Phys. Rev. Lett., 95(25), 250501 (2005). arXiv:quant-ph/0506038vl. 

Chapter[3l Decoupling and Computation. This chapter focuses on the fundamental problem of com- 
bining dynamical decoupling and quantum computation. Here, we allow the quantum gates as well as 
the decoupling pulses to be generated within a finite time interval. After presenting an overview of 
known results, the PAREC method is proposed, which is based on alternating the decoupling pulses of a 
randomized decoupling strategy with specially adjusted quantum gates forming the quantum algorithm. 
We derive a formula for the fidelity decay of a quantum computation perturbed by static imperfections 
with and without the P AREC method. It is shown that the PAREC method is a realization of an idea 
of Prosen and Znidaric PZOlj , who proposed to stabilize a quantum computation against static imper- 
fections by increasing the decay of the correlation function measuring the fidelity decay. Eventually, 
we consider the dynamically corrected gates (Euler-DCGs) of Khodjasteh and Viola |KV09I] which cor- 
respond to an implementation of a deterministic decoupling strategy for the purpose of computation. 
We propose to implement the PAREC method by using only Euler-DCGs in order to benefit from the 
advantages of both methods. Some of the results of this chapter have already been published. The 
PAREC method together with nu merical e vidence was already devised in the author's diploma thesis 



Ker04j and has been published in [KASOSt 



O. Kern, G. Alber, and D. L. Shepelyansky. 

Quantum error correction of coherent errors by randomization. 

Eur. Phys. J. D, 32(1), 153-156 (2005). arXiv:quant-ph/0407262vl. 

The comparison of the PAREC method with the idea of Prosen and Znidaric together with a formula 
for the average fidelity for the special case of instantaneous gates and decoupling pulses was given 
in [cKAJOSj : 

D. Geberth, O. Kern, G. Alber, and I. Jex. 

Stabilization of quantum information by combined dynamical decoupling and detected-jump 
error correction. 

Eur. Phys. J. D, 46(2), 381-394 (2008). arXiv:0712.1480vl. 

Chapter |4| Selective Recoupling and Randomized Decoupling. Instead of implementing a two- 
qudit quantum gate with the help of an external gate Hamiltonian, a quantum computer might use 
existing inter-qudit couplings. Now, a non-operation is implemented by using a decoupling scheme which 
effectively switches off all couplings. To implement a certain two-qudit gate, a selective decoupling (or 
selective recoupling) scheme is employed which removes all but the desired coupling. By drawing on a 
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particular example, this chapter shows how a selective decoupling strategy can be improved by devising 
a combined selective decoupling strategy involving randomized decoupling. While a corresponding 
combined decoupling strategy can be devised quite easily, the non-vanishing lowest order AHT term of 
the selecti ve deco upling strategy makes things a bit more difficult. This chapter is a slightly enhanced 
version of KAod | : 



O. Kern and G. Alber. 

Stabilizing selective recoupling schemes by randomization. 
Phys. Rev. A, 73(6), 062302 (2006). arXiv:quant-ph/0602167vl. 

Appendix [A] and [Bj Chapter El of the appendix contains some examples of difference schemes and 
orthogonal arrays. This data can be used to obtain decoupling schemes as explained in section 12.21 
Chapter [B] explains how certain quantum maps can be implemented as quantum algorithms. Such 
quantum algorithms are used in chapters [3] and 3] as test algorithms for the numerical simulations of the 
PAREC method and the improved selective decoupling method, respectively. More detailed information 
on quantum m aps an d their implementation on a quantum computer can be found in the author's 



diploma thesis Ker04| . 



1.1.2 Part II: Codes and Cryptography 

One of t he fu ndamental theorems in classical information theory is Shannon's noisy channel coding 



theorem Sha48,] . If classical information is to be transmitted over a classical noisy channel. Shannon's 
theorem assures that the transmission can be performed error-free as long as the transmission rate 
is below a maximum rate. This maximum rate is called the capacity of the channel. To achieve an 
error-free transmission, error-correcting codes have to be employed. It turns out that the full capacity 
of a channel can be achieved by using randomly constructed block codes. In quantum information 
theory, the analogous theorem is the quantum noisy channel coding theorem which states that quantum 
information can be sent reliably over a noisy quantum channel as long as the transmission rate is below 
the quantum capacity of the channel. Quantum information which is to be sent over a noisy quantum 
channel has to be encoded using quantum error-correcting codes. Surprisingly, it turns out that in 
contrast to the classical case, randomly constructed quantum codes do not achieve the full capacity of a 
quantum channel: By considering a concatenated quantum code obtained by encoding the information 
encoded by a random code one more time with a so-called cat code, Shor and Smolin showed that 
error-free transmission over the so-called qu bit depolarizi ng channel becomes possible at a higher rate 



than achievable by the random code alone SS96I : lDSS98l | . In this thesis we extend these calculations 



to cat codes of larger size and obtain improved lower bounds on the capacity of the qubit depolarizing 
channel. 

The quantum capacity of a noisy quantum channel has a close connection with the security of a 
quantum key distribution protocol. If the parties Alice and Bob are able to determine how the quan- 
tum channel (i. e. the eavesdropper) acts on the quantum states sent from Alice to Bob, they might 
use a quantum error-correcting code to transmit these states error-free, i. e. in such a way that the 
eavesdropper does not learn anyt hing ab out them. A security proof of the BB84 protocol following this 
idea was given by Lo and Chau [LC99t . Unfortunately, in order to implement such a protocol, Alice 



and Bob have to be able to manipulate quantum states during the encoding and the recovery step. 
By ma king u se of the special structure of a certain class of quantum codes, the so-called CSS codes 



[CS96I : ISte96l | , Shor and Preskill showed that a protocol based on encoding the states is equivalent to the 
original prepare and measure protocol Hence, results on the achievable transmission rate over 

a certain type of quantum channels (so-called memoryless Pauli channels) with the help of CSS codes 
can be used to prove the security of certain QKD protocols up to a certain error rate. As discussed in 
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the previous paragraph, randomly constructed CSS codes give a lower bound on the obtainable secure 
key rate, but concatenation of such codes with deterministic ones leads to even better bounds. 

Another way to improve the secret key rates is to add noise to the raw key bits before they are 
processed into the final key. Such a procedure is know n as local randomization or noisy preprocessing 
and was discovered by Renner et al. KGROSi : lRGK05l | . A security proof of a QKD protocol involving 
noisy preprocessing is not so straightforward as the Lo-Chau or Shor-Preskill proof. The difficulty 
lies in the fact that a security proof based on perfect quantum error correction assures that Alice and 
Bob could in principle shar e perfectly entangled states, which are sufficient but not necessary for the 
generation of a secure key HHHOOSj . A more so phistic ated security proof involving CSS codes and 
noisy preprocessing was given by Renes and Smith RS07| . Recently it was shown by the same authors 
for BB84 that by combining both methods — noisy preproce ssing and the use of the concatenated cat 
code — even higher secure key rates can be obtained [SRSOSt . In this thesis it will be shown that these 
results can also be applied to the 6-state protocol. Furthermore, an iterated version of the combined 
preprocessing protocol is considered. In order to evaluate the formulas expressing the secure key rates 
efficiently, results from representation theory have to be used. In this context a matlab program was 
developed which calculates the Schur basis of the Hilbert space of n qudits of dimension q. 



Outline 

Chapter|5j Classical Error Correction This chapter provides an introduction to the theory of classical 
error-correcting codes. The main focus is on linear codes. A linear code with g*^ codewords of length 
n is a fc dimensional subspace of the space containing all strings of length n with entries from the 
field F^. Shannon's noisy coding theorem is proven for the binary symmetric channel by using random 
linear codes and typical set decoding. 



Chapter [5] Quantum Error-Correcting Codes We introduce the theory of quantum error-correcting 
codes. An important class of quantum codes are the so-called stabilizer codes which might be viewed 
as the linear codes of quantum error correction. A stabilizer code encoding k qudits of dimension q into 
n is characterized by a /c dimensional self-orthogonal subspace (called stabilizer) in the space F^" with 
respect to a symplectic inner product. We explain how a unitary encoding of such a code corresponds 
to an extension of a basis of the stabilizer to a hyperbolic basis of F^". Then we specialize in the class of 
CSS codes, which form a subclass of stabilizer codes with a direct connection to classical linear codes, 
and show how the description of an encoding can be simplified. Finally, we discuss the concatenation 
of two stabilizer codes. 



Chapter [7j Quantum Channel Capacity While Shannon's noisy coding theorem is one of the funda- 
mental theorems of classical information theory, this chapter deals with the quantum analog of Shannon's 
noisy coding theorem. For a certain class of channels — so-called memoryless Pauli channels — coding 
theorems are proven which provide lower bounds on the capacity. These theorems use (i) random sta- 
bilizer codes, (ii) random CSS codes, and (iii) random stabilizer codes concatenated with deterministic 
inner ones for encoding and joint-typical set decoding to implement the recovery operation. The last 
theorem is used in connection with a specific deterministic inner code — a so-called cat code — to 
obtain better lower bounds on the capacity of the qubit depolarizing channel. 



Chapter[5t Qu antum C ryptography This chapter shows how the results of the combined preprocessing 
step for BB84 SRS08l | can be applied to the 6-state protocol. We make use of the detailed analysis 
of the c oncatenated cat code provided by chapters [H] and [71 and employ the security proof of Renner 
RenOSl corollary 6.5.2]. In addition, for the BB84 protocol, an iterative version of this preprocessing 
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scheme is considered. It is explained how the secret key rates can be efficiently evaluated b y usin i 



insights from representation theory. The chapter is an enhanced version of the following article KR08 | 



O. Kern and J. M. Renes. 

Improved one-way rates for BB84 and 6-state protocols. 

Quant. Inf. & Comp., 8(8/9), 0756-0772 (2008). arXiv:0712.1494v2. 



Appendix [C] and [Dj Chapter [U] of the appendix contains some techni cal result s mainly concerning 
error-correcting codes. Chapter [D] explains the eigenfunction method CPW02| which can be used 
to obtain a computer program calculating the Schur transform. The Schur transform is a unitary 
transformation relating the standard computational basis of n qudits of dimension q with the Schur 
basis associated with the representation theory of the symmetric group S„ and the general linear group 
GU. 



1.2 Preliminaries 



The understanding of this thesis requires the knowledge of basic quantum mechanics and basic rep- 
resentation theory. In addition, the theory of error-correcting codes comes into play in part II. This 
section provides a brief overview of the necessary fundamentals of classical information theory, quantum 
mechanics and representation theory. An introduction to error-correcting codes will be g iven in chap- 
ter [SJ An overview over classical information theory can be found in the book of MacKay [MacOS*] . For 
an introduction to quantum mechanics we refer to the two books of Cohen- Tannoudji et al. [CTDL77.] . 
A comprehensive introduction to qua ntum computation and quantum information can be found in the 
book of Nielsen and Chuang [nCO^, which contains also a brief introduction to quantu m mech anics 



and classical information theory. In addition we refer to the lecture notes of Presk ill Pre98j | . An 



introduction to group representation theory can be found in the book of Tung Tun85 |. 



1.2.1 Probabilities and Entropy 

A discrete random variable X is characterized by a set of outcomes A — (ai, . . . , as) (s = \A\) together 
with an associated probability distribution P — {pi, . . . ,ps) such that X takes the values Ui G A with 
probability Pt{X = ai) = pi. The probabilities pi are non-negative numbers which sum up to one. The 
uncertainty of the outcome a random variable is characterized by the Shannon entropy of its probability 
distribution. 

Deflnition 1.2.1 (Shannon entropy). The g-ary Shannon entropy of a discrete probability distribution 
P = (pi, . . . ,ps) is defined as 

s 

1=1 

where the value of Olog^ is taken to be 0, which is consistent with the limit Imip^Q plog^ p = 0. 
Alternatively, we might say that the entropy of the random variable X is given by 

Hs[iosjX) Pr(a)log,Pr(a). (1.2) 

If the logarithm is taken to the base 2 the entropy is expressed in bits. Otherwise we stress such a fact 
by denoting the base b as H^i^g^y If a discrete probability distribution P consists of s elements, we write 
Hs(P) to indicate the number of summands. For s = 2 it is sufficient to denote the first element of a 
probability distribution P — (p, 1 — p), i. e. we write H2{p) = H2{P) = H2{p, 1 — p)- 
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Let us consider an additional random variable Y which is characterized by the set of outcomes 
B ~ (bi, . . . ,br) {r — \B\) and the probability distribution Q = {qi,...,qr). Then the conditional 
entropy of X given Y is defined as 



i7[iogj(X|y) = J2 ^[iog,](^l>^ = b) •Pr(&) 



beB V 

= - Pr(«,^')log, Pr(a|&). 

beB,a£A 

If X and Y are independent random variables, i. e. if Pr(ai, bj) = Pr(ai) Pr(6j) = PiQj, it follows that 
J?[iog^](X|y) = i/[iog,](^). For general X and Y the relation (X|F) = - i?[iog,](r) 

can be shown to hold, where H[i^g^]{X,Y) denotes the joint entropy of X and Y: 

H[,,^JX,Y) = - E PrK6)log, Pr(a,5). (1.4) 

b&B,a£A 

Definition 1.2.2 (Mutual information). The mutual information of two discrete random variables X 
and Y is defined as 

/[iog,](^ : Y) = i?[iog,](^) + ^[iog,](>^) - i^[iog,](^,>'). (1.5) 

It is easy to verify the relations /pogj (X : Y) = iJ[iog_^](X)-i7[iogj(X|r) = i/p^gj (F) - i/pogj (F|X) = 
/[iog^](K : X). Hence the mutual information measures how much the uncertainty of X is reduced when 

Y is known (and vice versa) . The mutual information is always non- negative and if and only if X and 

Y are independent variables. 

For prime q the Galois field ¥q contains the numbers 0, 1, . . . , g — 1 and addition and multiplication 
are performed modulo q. The vector space contains the vectors (0, 0, ... , 0), (0, 0, . . . , 1), . . . , (q — 
1, g — 1, ...,(?— 1) of length n with entries from F^. Note that F^ forms a group with respect to addition 
modulo q. 

Definition 1.2.3. The Hamming distance dist(2;, y) between two vectors x, y e F^ is defined as the 
number of places in which the two vectors differ. The Hamming weight wt{x) of a vector x £ F^' is 
defined as the Hamming distance between x and the null vector = (0, . . . , 0). 

We close this subsection proving the Chcrnoff bound for binomial distributions which will be used fre - 
quently in part II of the thesis to obtain asymptotic bounds. The proof is taken from the book Rom92| . 

Lemma 1.2.1 (Chernoff bound). LetY be a random variable which follows a {n,p) binomial distribu- 
tion, i. e. Pr(y = fc) = (fc)p''(l -p)"^*"'. Then, for any X <p such that nX S No, 

Proof. Let us define the random variable X = e*^ with t < 0. Since X takes only positive values, the 
Markov bound applies: 

Pt{X >a) < {X)/a. (1.7) 
It follows that the probability of Y taking on a value less than b is upper bounded by 

Pr(y <b)^ PliX > e"') < {X) /e*^ (1.8) 

Plugging the expectation value of X, 



k=0 
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into the upper bound for Pr{Y < b) leads to 

Pr(y< 6) = ^ -p)""'^ < (pe* + 1 - p)" • e-*^ (1.10) 



k=0 



Let us set A = b/n now. The right hand side is minimized for e* — ^-^j^ which hes in [0,1] if 
X<p. □ 



For p = 1/2 the Chernoff bound leads to the tail inequality (see e. g. WelSSl . section 3.5]): 
Corollary 1.2.2 (Tail inequality). For any X, with < A < 1/2 and nX e No, 

Xn 



^ ( J < A-^"(l - A)-"(i-^) = 2"^^(^). 



(1.11) 



1.2.2 Quantum Mechanics 



The state of a quantum mechanical system S is represented by a density operator p which is a non- 
negative operator of trace one acting on the associated Hilbert space Hs of the system. We denote the 
set of operators as CiTis) and the subset of density operators as S{Hs)- A state p is said to be a pure 
state if p = for some S Hs such that = 1. 

Time Evolution and Measurements 

The time evolution of a pure quantum state is specified by the Schrodinger equation, 

where H{t) £ £(7^5) denotes the self-adjoint Hamiltonian of the system. Correspondingly, the time 
evolution of a general quantum state p is described by the von Neumann equation, 

tnj^p{t)^[H{t),p{t)], (1.13) 

where the brackets denote a commutator, i. e. [A, B] ~ AB — BA. As a consequence, the time evolution 
operator of a closed quantum system is unitary, 

p(t)^U[t,Q)p{0)U\t,Q), (1.14) 

with 



U{t,0) ^Te^p(^-i H{t')dt' 



(1.15) 



where T denotes the Dyson time-ordering operator. 

If the quantum system S forms a part of a larger quantum system, S is said to be an open quantum 
system. Then the resulting time evolution of the open system alone is not necessarily unitary anymore, 
but is given by a trace-preserving completely positive map (tpcp-map) £ : S{Hs) S{Hs)- Any tpcp- 
map £ can be represented in terms of an operator sum decomposition {£'^1 such that '^^j^ Ej^Ef^ — T 
and 

£:p^£{p)=J2E^pEl (1.16) 

where I denotes the identity operator. 

A von Neumann measurement is characterized by a self-adjoint measurement operator M with spectral 
decomposition M — X^/j^Ai^/i; where the denote distinct measurement values and the denote 
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orthogonal projections (X)^ Pfj. ^ If '^6 perform a measurement of M on the state p, we obtain the 
result n with probability Pf_i = tr(P^p). Conditioned on the measurement result the state changes from 
p to P^pP^I tr(P^p). A more general measurement is specified by a positive operator valued measure 
(POVM), which consists of a set {F^} of positive operators such that ^^F^j, = X. In this case the 
probability of getting the result ^ is given by — tr (F^p). 

Entropy and Quantum Mutual Information 

Definition 1.2.4 (von Neumann entropy). The von Neumann entropy of a quantum state p G S{T-ls) 
is defined by 

'5'[iogj(p) = -tr(ploggp). (1.17) 

For a bipartite quantum system AB the joint von Neumann entropy of the state pab G S{TLa ^TCb) 
is defined by 

•Spogj {A, B) = S'[iogj {pab) = - tr(pAB log^ pab) ■ (1-18) 
By analogy with the Shannon entropies the conditional entropy of system A given system B is defined 

by 

5[iogj(A|S) = 5pogj(A,i?) - 5pogj(B), (1.19) 

where S'[iog^](i3) = S'[iog^](ps) denotes the entropy of the reduced state pB — trB{pAB) (trs denotes the 
partial trace with respect to system B). In contrast to the conditional Shannon entropy, the conditional 
von Neumann entropy might become negative. 

Definition 1.2.5 (Quantum mutual information). The quantum mutual information of a bipartite 
quantum system AB in the state pab G S{T-La ® Hs) is defined by 

/[log,] (A : B) = 5[iogj(A) + 5[iogj(i3) - ^[iog,](A,i?). (1.20) 

As it is the case for the classical mutual information, the relation I[\ag^] '■ B) = •S'pog,] {A) — 
S[iog,^\{MB) ~ '5'[iog,] (-B) — S'[iog,](-B|j4) = /[iog^](i3 : A) holds. The quantum mutual information is 
always non-negative. 

Quantum Registers 

A two-dimensional quantum mechanical system is called a qubit. Finite-dimensional quantum mechan- 
ical systems of higher dimension are called qudits. Let Tiq = €fl denote the Hilbert space of a qudit of 
dimension q, and fix an orthonormal basis {|0), . . . ^\q — 1)} of Tiq. A quantum register consisting of n 
qudits of dimension q is defined on the Hilbert space 7i^". An orthonormal basis of 7i^" is given by 
the set of 71-fold product states of the one-qudit basis states, 

= span{|zi,i2,...,i„)}, (1.21) 

with Q <ij < q for j G {1, 2, . . . , n} and Z2, . . • , in) = Ki) ® |*2) ® ■ ■ ■ ® \in) ■ A short hand notation 
for the basis states is given by • • ■ , in) = |i) with i e F^. 

Pauli Operators 

We consider qudits of of prime dimensions. The Pauli X and Z operators acting on Tig are defined bj0 

X\i) = \i + l (mod q)) (1.22a) 
Z\i)=uj'\i), (1.22b) 

where oj — exp(2TTi / q) is a complex primitive q-th root of unity. It follows that ZX — ujXZ. 

*Some authors use the definition X\i) = |i — 1 (mod q)). See, for instance, [Ham03| . 
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Definition 1.2.6. For any vector a = {a^,a^) = {af, . . . ,a^,al, . . . ,a^) e F^", let the Pauli operator 
XZ{a) acting on W®" be defined by 

XZ{a) = { ^ ^ , , ^ , 1.23 

(g)---(g)X<Z< forg>3 

so that the eigenvalues of XZ{a) are powers of iv. 

Remark. If we write the operator XZ{a) as XZ{{a' ,a^)) for some a = {a^,a^) G F^", we will use the 
shorthand notation XZ{d^, a^) omitting the braces of a = (a^, a^). For instance, the identity operator 
I is given by the operator XZ{0, 0) with = (0, . . . , 0) G 

If we represent the qubit Pauli operators in the {|0), |l)}-basis, we obtain the well known Pauli matrices, 

XZ(0,0)=Q J) XZ(1,0)=(J J) XZ(1,1)=(J XZ(0,1)=Q (1.24) 

which are also denoted as I, X, Y and Z. Hence, the qubit Pauli operators are Hermitian. For q > 3 
we obtain 

XZ{d) ■ XZ{b) = uj^-"-''' XZ{d+b), (1.25) 

while for 5 = 2 this expression holds up to some powers of i. As a consequence, XZ{-) gives rise to a 
unitary projective representation of F^", which by itself forms a group under addition modulo q: 

XZ{-) : F^" 9 a XZ{a) e qj^. (1.26) 

The full Pauli group is given by 

" \{ujiXZ{d)\j€¥g,a€¥l^} ,q>3' 

Its order is 4 •4" for qubits and q-q'^"' in general {q>3). If two elements of the Pauli group are identical 
up to a phase oj^, p G Wg, (or some power of z for g = 2 respectively), we write XZ{d) LO^XZ{d). We 
denote the set containing all n-fold tensor products of Pauli operators as 

= {XZ{d)\d€¥'f-). (1.28) 

Note that \V^\= g^" while |^^| = g • g^" (for g > 3). 

Definition 1.2.7. The symplectic inner product between elements a and b of F^" is defined as 

n 

(a,6),p = ^<&r-<&f (modg). (1.29) 
1=1 

Remark. With the help of the inner product defined above, the order of a product of two Pauli operators 
XZ{d) and XZ(J)) can be inverted, 

XZ{d) ■ XZ{b) = uj^^^^^^^XZib) ■ XZ{d). (1.30) 

Two operators commute if and only if the symplectic inner product between o and b vanishes. 

Bell States 

Definition 1.2.8 (Bell states). Let Hq denote the Hilbert space of a qudit of dimension g and let 
Ha = Wf", Wb = W®". Then the states 



l*5>AB = 4= E I-^)^®^^(^)bU)b, ^eFf, (1.31) 

are called Bell states. They are maximally entangled and form an orthonormal basis of Ha ^Hb- 
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1.2.3 Representation Theory 

This subsection provides a brief overview of the basics of the representation theory of finite groups. 
Representation theory will be relevant for decoupling in part I (if the elements of a decoupling scheme 
form a projective representation of an underlying group) and as a tool for the evaluation of the secure 
key rates of the quantum key distribution protocols in part II. 

We consider a finite group G of order no, i.e. G contains no = \G\ elements. If the elements of G 
commute with one another, the group is called an abelian group. 

Definition 1.2.9. An element b G G is said to be conjugate to an element a e G if there exists u G G 
such that b = uau~^. Elements conjugate to one another form a conjugacy class. 

Since conjugacy is an equivalence relation, each clement of G belongs to one and only one of the 
classes. If we denote the number of classes by n,^ and the number of elements in class i by n^, we have 
X^r=i ^» ~ '^G- A class containing the inverse of all elements in the class is called ambivalent. If a group 
is abelian, each element forms a class by itself. 

Definition 1.2.10. A representation (rep) i? of G is a group homomorphism from G to a group R{G) 
of operators on a vector space V, 

i? : G 9 a i?(a) = i?a S 'C(V). (1.32) 

From the definition of a group homomorphism we have Rab = Ra ' Rb for all a,b G G. The dimension 
d = dim(V) of V is called the dimension of the rep. 

Remark. If V is the vector space over the field C, a map from G to a set R{G) of operators on V 
satisfying 

Rab = r{a, b)-Ra- Rb, (1.33) 
with r(a, 6) G C for all a,b G G, is called a projective representation. 

We will always assume that the vector space V is an inner product space over the field C. Let us fix an 
orthonormal basis {\j)}j=o...d-i of V. Then, 

d-1 
i=0 

with Dij{a) = {i\Ra\j), and we obtain 

d-1 d-1 d-1 

RaRb\j) = i?a^ A,(&)|i) = Yl Du{a)D,,{b)\k) = Rab\j) = ^ ^fc, (a6) |fc) . 
i=0 k,i=0 k=0 

Since the {\j)} form a basis, it follows that Dkj{ab) = Dki{a)Dij{b) or D{ab) = D{a) ■ D{b). Hence, 
the group of matrices D{G) = {D{a) \ a £ G} forms a matrix representation of G. If R{G) is a 
representation of G on a vector space V, and A is a non-singular operator on V, then it is obvious that 
R'{G) = AR{G)A'^ also forms a representation of G on V. In this case R{G) and R'{G) are related by 
a similarity transformation. 

Definition 1.2.11. Two representations of a group G on a vector space V which are related by a 
similarity transformation are said to be equivalent representations. 

Definition 1.2.12. If the group representation space is an inner product space and if the operators Rg 
are unitary for all g G G, then the representation R{G) is called a unitary representation. 
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Remark. It can be shown that every representa tion of a finite group on an inner product space is 



equivalent to a unitary representation (see e.g. TunSSl . theorem 3.3]). In the following we consider 
only unitary representations. 

Definition 1.2.13. Let R{G) be a representation of G on a vector space V. A subspace Vi of V is 
called invariant subspace of V with respect to R{G) if Rg\ip) S Vi for all g e G and for all \(p) £ Vi. 

Remark. If a space Vi is an invariant subspace of a representation R{G) on V, then Vi itself is a 
representation space. 

Theorem 1.2.3. // an operator A commutes with all operators Rg of a rep R{G), then the eigenspace 
V\ of A is a representation space of G. 

Proof. We show that Va is an invariant subspace of R{G) on V. Let |0a) G Va so that A\(j)\) = A|0a)- 
Then, ARg\(l)x) = RgA\(l)x) = \Rg\(f>x) and it follows that Rg\(f)x) G Va for all |(/)a) G Va and all 

Rg G i?(G). □ 

Definition 1.2.14. A representation i?(G) on V is irreducible if there is no non-trivial invariant sub- 
space in V with respect to R{G) (we may also say that the representation space is irreducible). Otherwise 
the representation is reducible. 

Since we consider only unitary representations, reducible always means fully reducible: Let Vi be 
an invariant subspace of the representation space V, and let V2 be the space orthogonal to Vi, i.e. 
V = Vi ® V2. Then, since {RgV2\vi) = {v2\Rlvi) = {v2\Rg-ivi) = for aU \vi) e Vi, aU \v2) G V2 
and all g G G, it follows that V2 remains invariant, too. In other words, the operators Rg of a 
reducible representation R{G) become block-diagonal for a proper choice of basis. For instance, if the 
representation space V decomposes into two irreducible invariant subspaces V = Vi ® V2 of dimension 
di and d2^d-di,we write R{G) = D^^^G) © D(-'^^{G) and 

fD'^^Hn) \ 
Rg-^D{g)^( y> ^f2U„^)' (1-35) 



D^^^g) 

where £''■^■'((7) is a di x di matrix and D'-^^{g) is a (i2 x ^2 matrix. In general we obtain the relation 

R{G) = ^t,,-D'^-'HG), (1.36) 

where f labels inequivalent irreducible representations and t^, denotes the number of times a certain 
irreducible representation 1/ occurs. The dimension of the irrep D^'^'^{G) is denoted by d^- Hence there 
exists an orthonormal basis 

{\vhm^)\v£j, ly = l...T^, ^ I . . .di,], (1-37) 

in which the operators Rg are block-diagonal, i. e. 



Rg\v I, m,) = D(''\g)\v I, m,) = ^ D''^l^^{g)\v I, m'J. (1.38) 



m'—l 



We label the subspace of the representation space V which is spanned by the set of basis vectors with 
fixed V hy V,y, 

= span{|j/ ly nil,) | Zi/ = 1 . . . r^, = 1 . . . di,] . (1.39) 

Since V^, has the form of a tensor space {\v l^, rui,) = ® \m,^)), we write Vy — C,j ® V^, where the 
dimension of Cv is given by and the dimension of I?^ is given by d^. The representation space V 
decomposes into a direct sum of orthogonal subspaces, 

V= V, = 0C,®I?,. (1.40) 
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If we restrict an irreducible representation (irrep) D^'^'> (G) of a group G to elements of a subgroup 
Gs C G, we obtain a subduced representation denoted as D'^"\G) | G^. A subduced rep is in general 
reducible and can be decomposed into a direct sum of irreps of Gs , 

D^^'XG) i Gs = 0r('') • D^^\Gs), (1.41) 

where rj:!^^ denotes the number of times the irrep occurs m D^-'^G) I Gs. If < 1 for all 

possible V and /i, then Gs is called a canonical subgroup of G. A canonical subgroup chain is a group 
chain G D Gi D G2 • • • D G„ such that G^+i is a canonical subgroup of Gi (z = 0, 1 with 
G = Go) and G„ is abelian. 

Theorem 1.2.4 (Schur's lemma i). Let A be an operator commuting with all operators of a rep R(G) 
of G on V, and let Q V be an irreducible rep space of G and an invariant subspace of A. Then Vv 
is necessarily an eigenspace of A. 

Proof. Let us assume that the invariant subspace Vu of A decomposes into two eigenspaces of A, 
Vj/ = Vi/,1 © Vu,2. According to theorem 11.2.31 each of these spaces would be a representation space, 
which is in contradiction to V^, being an irreducible rep space. Hence, the only possibility is that 
AV^ ^uV^,. □ 

Remark (i) . The representative of an operator A in is a multiple of the identity: Let a basis of Vu be 
given by {|z)}i=o,...,di,-i. Then the matrix representative of A in is given by D-J^ (A) = (i|A|j) =i/Sij. 
If V,y = V we obtain the result that the only operator commuting with all operators of an irrep R{G) is 
a multiple of the identity. 

Remark (ii). A direct consequence of Schur's lemma is that an irrep of an abelian group must be of 
dimension one. 

Theorem 1.2.5 (Schur's lemma ii). Let D^f^^{G) and D^'^^{G) be two irreps of G on the spaces and 
Vy respectively, and let A be a linear transformation from Vi, to which satisfies AD'^'^'^ (g) = £)(^) ig)A 
for all g <E G. Then, either A = 0, or and Vi, are isomorphic and D'^^^G) — AD'^^\G)A'^^, i. e. 
the irreps /i and v are equivalent. 

Proof. It is easy to verify that the range of A is an invariant subspace of with respect to D'^^^G). 
bmce is irreducible it follows that either the range is (which implies A — 0) or the range is 

V^. Similarly, the null space of A in Vv is an invariant subspace of with respect to D'''^\G). Since 
D^^\G) is irreducible it follows that either the null space is equal to (implying A = 0) or the null 
space is (implying that A is a one-to-one mapping). Hence A is either an isomorphism between 
and Vi, or it vanishes. □ 

The second part of Schur's lemma can be used to prove the orthonormality of irreducible representa- 
tion matrices. 

Theorem 1.2.6 (Orthonormality of irreducible representation matrices). Let D^^\G) and D^f^\G) 
denote two inequivalent irreducible representations of G, and let the dimension of the /i representation 
be given by d^ . Then the following orthonormality condition holds. 



Y.Dll'\g)Df{g)^5,J.,M^ (1.42) 
with D^^:^^^ {g) denoting the complex conjugate of the matrix element d\'^'^ {g) . 
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Definition 1.2.15 (Group algebra). The group algebra CG is defined as the complex vector space 
spanned by the group elements, i. e. any element a in CG can be written as a = X^geG ^99 '^ith Ug G C. 
For two elements a, b in CG the product 

ab= (^^agg^(^^bhh^ ^ ^ Ugbh gh ^ ^ (^'^ ag,f,-ibh^ g' (1.43) 
gGG heG gJieG g'ea hea 

turns CG into an algebra. 

Any representation i? of G extends by linearity to a representation of the elements in CG. Let A — 
i?(CG) denote the algebra generated by R, and let its commutant A' be defined as the set of elements 
that commutes with all the elements in A, A' ^ {V € C{V) \ VA = AV for all A€ A}. The following 
theorem follows from the orthonormality of irreducible representation matrices and the first part of 
Schur's lemma. 

Theorem 1.2.7. In the {{ly li, m^)}-basis (as defined in equation (|1.37|) ) corresponding to the repre- 
sentation R, A — R{CG) and A' take the form 

^ - 1^.^ ® Mat(d^ X d^, C) (1.44) 

A' ^^Mat{T^XT^,C)(gild^, (1.45) 

where 1„ denotes an n x n dimensional identity matrix and Mat(n x n, C) denotes the set of n x n 
matrices with entries in C. 

Remark. In part 1 of this thesis we are sometimes going to deal with projective representations R{G) 
of G on V. In this case we assume that the set of unitary matrices {Rg — R{g) \ g € G} generates a 
finite group G larger than G and consider the ordinary irreducible representations of G. If we define the 
center of G by Z{G) = {z £ G \ gz — zg for all g £ G} then the quotient group G/Z{G) is isomorphic 
to the original group G. 

Let us close this subsection revisiting the set of n-fold tensor products of Pau li oper ators. This 



set is an example of a so-called nice error basis. Such a basis was defined by Knill in Kni96l | as follows: 

Definition 1.2.16. Let G be a group of order |G| = d^ and let its identity element be denoted by e. 
A nice error basis is a set £ — {D{g) E Ud\g E G} of unitary dx d matrices such that (i) D(e) is given 
by the identity matrix, (ii) tr{D{g))/d = Sg^^ for all g E G, and (iii) D{g)D{h) = a{g, h)D{gh) for all 
g,h E G, where a{g, h) is a function from G x G to C \ {0}. 

A consequence of conditions (i) and (iii) is that the map G 9 3 i-^ -D(g) £ Ud defines a projective 
representation of G on a d-dimensional Hilbert space TL. It follows from condition (ii) that the matrices 
D(g) are pairwise orthogonal with respect to the trace inner product {A^B) — tv{A'^ B)/d. Hence 
they form a basis for the operators acting on Ti and the projective representation of G on 7i must be 
irreducible. Since the matrices are unitary we have |det-D((7)| = 1 for all 5 g G and it follows from 
(iii) that \a{g, h)\ ^ 1. The group G is also called the index group. It is easy to verify that the set Vg 
of Pauli operators with the index group given by F^" fulfills the definition of a nice error basis with 
a{g,h) = w^'^'-'*^ for g= {g'=,g^),h^ (H^,/J^) G F^" (compare with pT^ ). 

Finally, let us define the notation of several groups we are going to encounter. The symmetric group 
S„ on the finite set {1, 2, . . . , n} consists of all permutations of the set and has order nl. The general 
linear group of degree q over the field C is the group of g x g invertible matrices with entries from 
C. It is denoted by GL, = GL{q,C). Subgroups of GLq are the unitary group Uq containing unitary 
matrices, the special unitary group SUg containing unitary matrices with unit determinant, and the 
3-dimensional rotation group which is the special orthogonal group of degree 3 over the field R and is 
denoted by SO3 = S0(3,M). 
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Part I 
Random Decoupling 
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2 Dynamical Decoupling 



This chapter deals with dynamical decoupling strategies in the bang-bang control scenario. After giving 
an introduction to dynamical control theory and average Hamiltonian theory (AHT), we present an 
overview over known construction methods for dynamical decoupling schemes. The main focus is then 
on improved decoupling strategies which are based on a fixed decoupling scheme. The performance of 
these strategies is analyzed by deriving formulas for the average fidelity decay. For any randomized 
strategy, in addition, the variance of the fidelity is studied. With the help of a numerical simulation of 
a quantum memory perturbed by Heisenberg interactions, these formulas are validated and conclusions 
concerning a general guideline for optimal decoupling are drawn. 

We start by presenting the necessary framework in section l^TTl The overview over known construction 
methods for efficient decoupling schemes will then be given in section [2.21 Improved control strategies 
based on a given decoupling scheme are explored in section [2?3l Finally, we present the results of the 
numerical simulation in section [2.41 



2.1 Dynamical Control of Quantum Systems 

Let S' be a quantum system defined on a finite d-dimensional Hilbert space Tis and let its dynamics be 
generated by the system Hamiltonian Hq G C(Ti.s)- Typically the quantum system S under considera- 
tion will be a quantum register consisting of n qudits of dimension q so that Tis = 7i^" and the system 
Hamiltonian describes some static imperfections. We assume that we are able to apply a certain set of 
local control operations which are realized by the time-dependent control Hamiltonian Hc{t) E £{Hs)- 
Local means that He is a sum over one qudit Hamiltonians, i.e. Hc{t) = J2^=i ^i^H^) ® ^{i....,n}\{i} 
with some time-dependent h^'^\t) S C{Tiq). In turn the total Hamiltonian is given by 



H{t) = Ho + H,it) (2.1) 
and according to the Schrddinger equation our system evolves in time as 



U{t) ^Texp(^-i H{t')dt'/h^, 



(2.2) 

where T denotes the Dyson time-ordering operator. Analogous to (|2.2[) let us denote the time evolution 
due to Hc{t) alone by UrXt), i- e- 



Uc{t) ^ T exp(^-i Hc{t')dt'/h 



(2.3) 

We now define the toggled frame as the frame that continuously follows the applied control, U{t) — 
Ul{t)U{t). The time evolution in the toggled frame is determined by the Schr5dinger equation 

^^^ = mij{t), (2.4) 

where the toggled frame Hamiltonian is given by 

H{t) = Ul{t)HoUc{t). (2.5) 

Dynamical control of Hc{t) and in turn of Uc{t) allows us to modify the time evolution in the toggled 
frame. There are different possible control tasks. If we deal with a quantum memory for example, we 
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Figure 2.1: Schematic representation of bang-bang control. At time ti the pulse pi is applied instantaneously. 



may want to freeze the evolution by demanding U{t) ~ J in order to preserve the stored data. Another 



goal is the simulation of other Hamiltonians (see e.g. WRJB02al : |BDNB04| ). i.e. we would like the 



system to evolve as U {t) « exp{—iHQt/h) with Hq ^ Hq. The former of these tasks is called decoupling. 
2.1.1 Bang-Bang Control 

In the quantum bang-bang control scenario VL98| it is assumed that we are able to apply a strong 



control Hc(t) over a very short time interval. In this case the resulting control action can be described 
as a quasi-instantaneous application of unitary pulses pi at times ti = X)fe=o ^^f' , i G Nq . Since the 
control is assumed to be local, these pulses are of the form pi = u^^'*'' ® u'^'^^ (8) • • • ® ul^'^\ where Uc"'''' 
denotes the unitary g \Jq being applied to the c-th qudit. After a time we obtain the total 

time evolution 

U{tN) = PN fAtM-i ■ ■ ■ P2 fAtiPl fAtoPO, (2.6) 

as depicted in figure \n\ Here, /a*^ — exp{—iHoAtj/H) denotes free evolution due to Hq over the time 
interval Atj . Defining — pi . . . pipa we note that this evolution can be written as 

U{tN) = Sivlsjv-i/AtN-iffw-i) • ■ • (ffI/Ati5l)(5'J/Atoffo)- (2.7) 

The time evolution operator Uc at time ti + s with s G [0, Aij) is given by Uc{ti + s) = gi, i.e. Uc 
jumps from g^^i to gi = {gigl_^)gi^i = Pigi^i at time t^. Since g],fAtj9j = exp{--igJiHogjAtj/h), 
let us define the toggled frame Hamiltonians Hi = gjHogi. After switching to the toggled frame 
U(tN) = U^{tN)U{t]^), the time evolution of equation (j2.7p becomes 

{/(iw) = exp{-iHN~iAtN-i/h) . . .exp{-iHiAti/h)exp{-iHoAto/h). (2.8) 

To keep the notation as simple as possible, we set h — 1 for the remaining chapters. 

2.1.2 Average Hamiltonian Theory 

A convenient tool which is commonly used to analyze the resulting dynamics of a dynamical control 



scheme in the toggled frame is the average Hamiltonian theory (AHT) [EBW87l | . Let the time evolution 
in the toggled frame be generated by the time-dependent toggling frame Hamiltonian H(t) of equation 
(|2.5p . After a time t this results in the time evolution operator 



U{t)=Texp[-i j H{t')dt'y (2.9) 

which can be written in terms of an average Hamiltonian H (which depends on t) as 

U(t) =exp(^^iHty (2.10) 
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AHT expresses this average Hamiltonian as an infinite series of self-adjoint operators called Magnus 
expansion, 

H = h'"^+H^'^+H^'^ + ..., (2.11) 
the first three terms of which are given by 

= - / dtiH{ti) (2.12a) 
t Jo 

H^^^^-^l dt2 dti[H{t2),H{ti)] (2.12b) 



2t 





H^^^ ^ --^^ 1^ dts JJ dt2 JJ dti {[H{t3), [H{t2),H{ti)]] + [[H{t3),H{t2)],H{ti)]) . (2.12c) 
To obtain these expressions, we write (|2.9p as an infinite series, 

U{t)=I~ity2^-^ dtn+l dtn... dtiH{tn+l)H{tn)...H{tl) 

n=0 ^ -^0 

OO 

= 1 -it'^hn, (2.13) 

n=0 

and expand (j2.10[) as 



n=l 



(2.14) 



— (i) • ~ 

By noting that both hj and H are of order j + 1 in H and by comparing expressions of the same 

order in the last two equations, we obtain the expressions ha ~ iJ^"', hi = h'^^^ — it(i/^°'')^/2, et 
cetera, which eventually lead to (|2.12p . In the bang-bang scenario at the time t = tpf the Hamiltonians 
(|2.12ap - (|2.12cp become 



^ J2 HjAt, (2.15a) 



j=o 



H^'^ ^-7^ Y^^H^^^^W^^h (2-15b) 

1 fl/2 if* — 'or ' — fc 

77^'^=-— y {[k,,[H,,Hk]] + [[H,,H,],Hk])M,M,I^tky.\ ' .(2.15c) 
Ol/v ^ '1 else 

Finally, we state a theorem that will be used later on in this chapt er to im prove the performance of 
dynamical control schemes. A proof of this theorem can be found in Bur81 |. 



Theorem 2.1.1. // the toggled frame Hamiltonian is symmetric in time, i. e. if H{t — t') = H{t') for 
t' e [0,t], all c 
for fc = 1, 3, 5, . 



t' G [0,t], all odd orders in the Magnus expansion (PTTjl of U{t) = cxp{-iHt) vanish, i.e. W ' = 



2.1.3 The Fundamental Control Strategy 

To achieve a certain control task like the simulation of a Hamiltonian Hq, we make use of the simple 
structure of the zeroth order term H^^'' in the bang-bang setting. 
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Figure 2.2: Schematic representation of the cyclic (or periodic) control strategy (PDD). 
Definition 2.1.1. A set of unitaries {5j}"^o^ ^^"^ relative times {Atj}^!^^ such that 

lie— 1 Jie— 1 , 

= - E ^1^*1 ^ r ^ 9]Hog,Atj = ^0 + c • ^X, (2.16) 

where tc — J2^Lq^ ^^jj = tr(i7o) — tr(i/Q), and d = dimCHs), is called a control scheme of length ric 
for the simulation of the Hamiltonian Hq with the system Hamiltonian Hq. 

Remark. Without loss of generality, we usually assume all of the involved Hamiltonians to be traceless. 
In this case we have a vanishing constant c = 0. 

If we would like to achieve decoupling we set Hq = 0. In this case a control scheme {gj, Atj}"l^^ is 
called a decoupling scheme. An overview over various decoupling schemes for different types of Hq is 
given in section [^21 It turns out that most of the times it is sufficient to consider control schemes with 
constant relative time intervals, i. e. Atj = At for all j G {0, . . . , rtc — !}■ In the following we will always 
be dealing with such schemes. 

The most basic control strategy is called cyclic (or periodic) dynamical decoupling (PDD). It consists 
of repeating the pulse sequence po, . . . ,pn^-i, with pj = gjgj_i for = 1, ric — 1 and pq — .goffl^-i 
(with the exception that the first po is simply given by go) constructed using the elements of a control 
scheme {gj}^^^ satisfying 

- J2 9}Hog, =H'q + ,--I, (2.17) 

over and over again (compare with figure I^T^ : At the time tj = j ■ At, j G No, the pulse pj mod is 
applied. As a result, the time evolution in the toggled frame after a time T = m ■ tc, m (z N, tc ^ ricAt, 
is given by 

U{T ^m-tc) ^ iexp{~iHn^^iAt) . . .exp{-iHiAt) cxpi-iHaAt)] ^ cxp{-iHtc ■ m), (2.18) 

where the zeroth order term in the Magnus expansion of H is given by (j2.17p . In the limit of m — s- cx) and 
At — > with T — m-UcAt held constant, the influence of the higher order terms in the Magnus expansion 
decreases and PDD achieves its task perfectly: limAt^o U{T) = exp(— ii7'"°''T) = cxp{—iHQT) ■ e^*^'^/''. 
In a realistic experiment we do not achieve this limit. Therefore it is important to (i) quantify the error 
caused by the higher order terms and (ii) devise control strategies which keep the error for finite At as 
small as possible. In fact the main focus of the first part of this thesis is on (ii) and is dealt with in 
section [^751 We proceed with (i) in the next subsection. 

2.1.4 Performance Measure 

If the control task is the simulation of a Hamiltonian Hq, the goal of a dynamical control strategy 
is to achieve a time evolution U{T) in the toggled frame which is (up to a global phase) as close to 

*We call it a decoupling strategy even so it might be used for the purpose of simulating some Hamiltonian. 
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Uid{T) = exp(— iiJgT) as possible. To quantify this closeness we define the pure state fidelity 

i^l^)(r) = |(^|[7/,(T)^(T)|^)|'. (2.19) 

As long as F\^^{T) stays close to one, we know that our control strategy was successful (at least if the 
quantum system was in the initial state | '!/'))■ To drop the dependence on \ip), we might consider the 
worst case fidelity, 

i^^(r)= min |(^|;7/,(r)c7(r)|v.)|', (2.20) 



as it was done in VK05l | for the purpose of finding a lower bound, or we might consider the average 
fidelity 

Fa{T)^ J\mUT)U{Tm\^d4,. (2.21) 

Here, the integration involved in the definition of the average fidelity has to be performed over the 
uniform (Haar) measure on the relevant quantum state space with the normalization J dip = 1. 

More generally, for a trace-preserving quantum operation £ (i. e. a trace-preserving completely posi- 
tive map), the average fidelity is defined as 

Fa{£) = I {^ISmWMd^. (2.22) 

Let |<I>) be a maximally entangled state (e. g. a Bell state) between the quantum system under consid- 
eration and an ancilla system of the same dimension d ~ dim(7Y5). Then the entanglement fidelity is 
defined as 

F,{£)^{mi®£)mmm, (2.23) 

where 2 denotes the identity operation acting on the ancilla system. The entanglement fidelity mea- 
sures the degree to which the entanglement of quantum state is preserved by a quantum operation £. 
Apparently, it is independent of the choice of the maximally entangled state since any two maximally 
entangled states are related by a unitary actin g only on the ancilla. Both fidelity measures are not 
independent but are related by |hHH99I : iNieO^ 



f,.(^) = ^^#±i.f,,,) + o(i-5^|. (2.24, 



Thus, in the case of a quantum system which consists of a large number of qudits, i. e. c? = q" 3> 1, the 
difference between both measures tends to zero. If we set £{p) = U^^{T)U{T) p (l^ {T)Uid{T) , we obtain 

Fe(f) =F,(T) = \^tr{ul{T)U{T))\\ (2.25) 

Typically, the evaluation of the entanglement fidelity is much simpler than the direct evaluation of the 
average fidelity (|2.2ip . Therefore, in view of its close relationship to the average fidelity our subsequent 
discussion will mainly concentrate on the behavior of the entanglement fidelity. 

Let us now consider the control task of decoupling, i. e. Uid{T) — T, and let us estimate the entan- 
glement fidelity given by (|2.25p for the PDD control strategy. The resulting fidelity has to be compared 
with the fidelity which is obtained in the absence of any decoupling. Without loss in generality, we 
assume that tr(i7o) = 0. 

No Decoupling (none) 

Let us start examining the decay of the entanglement fidelity (j2.25|) in the absence of any decoupling. 
In this case the time evolution due to the control alone is trivial, Uc(t) — X, and the time evolution in 
the toggled frame coincides with the time evolution in the Schrodinger picture, i. e. U{T) — U{T) = 



23 



2 Dynamical Decoupling 



exp^^iHoT). In order to derive a series expansion of the fidelity, we write the system Hamihonian Hq 
as XHq and expand in A (setting A = 1 in the end). Such a series expansion up to fourth order in A 
leads to 

F--(T)=|itr(^(r))|' 

= 1 - i tr(i/„2)T2 + (1(1 tiiH',)f + 1 tr{H^)) + 0{X'T% (2.26) 

Hence, for sufficiently small times, the fidelity decay is quadratic in time and its strength is determined 
by the trace of the square of the system Hamiltonian Hq. By comparison with numerical simulations 
for various H^, we found that a good approximation of F2°"^{T) valid for < T < \/2/ ^tr(_ffQ)/(i, or 
in other words as long as F"°"^{T) > 0.1, is given by the simple expression 

pnone /rji\ ^,^^[ ^ ^-^z" u2\t^2 



K°:;^{T) - exp(^-- tr(iJo^)r^j . (2.27) 
Viola and Knill jVKOSl . theorem 3] gave a strict lower bound on the worst case fidelity (j2.20p for PDD 



by using the matrix norm \\A\\2 = max | eig(V ^^j4)| and setting n = ||7Jo||2- Analogous to this bound, 
a corresponding lower bound in the absence of decoupling is given by 

F^°"^{T)^ mm \{i!\U{T)\ijj)\^ > 1- K^T^ + 0(k^T^). (2.28) 

The PDD Fidelity 

By using a suitable control scheme {5j}"^o^' have i?^"'' = and U(T) = exp(— i X^^i h''''^T) for 
T ^ m ■ tc with m E N and tc = UcAt (compare with (|2.18p ). Writing Hq as XHq, we obtain 

1 2 1°° 

Fr°iT)^ ltr(i7(T)) ^l-Ltr({Y.H^yy + ... 



d 

1 _ i tr((i7^^^)^)r2 + 0{XhlT^). (2.29) 



To evaluate this short time estimation, we have to calculate A rough estimate based on the fact 

that H^^'' is a sum over 0(71^) terms of the form HiHj leads to iJ*'^^ — 0{X^tc). As before, we argue 
that a good approximation of F^^'-'{T) is given by 

F^^^^iT) = exp(-itr((H<^y)r2), (2.30) 

as long as the fidelity has not become too small, i.e. for times T s uch tha t F^^^{T) > 0.1. A strict 
lower bound on the worst case fidelity was given by Viola and Knill [VKOSl theorem 3] : 

F^°°{T) > 1 - kHIT^ + 0{KhlT^). (2.31) 

2.1.5 Open Quantum Systems 

Up to this point we considered a closed quantum system S and the task of dynamical decoupling was 
the removal of inter-qudit couplings. In a real-world scenario, there will always be an interaction of 
the system with its surrounding environment E. As a result, entanglement between the system and 
the environment may arise causing the q uantum system to evolve in a non-u nitary way and to undergo 
a process called decoherence. Zanardi Zan99 | and Viola etal. VKL99l | proposed that dynamical 



decoupling techniques may be applied to decouple such systems from their environment. This subsection 
summarizes the main idea. 
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In this subsection we consider S to be an open system, i. e. to be part of a larger closed system formed 
by S and E together. Then the total system is defined on the Hilbert space Hse = Ti-s Ti-E, where 
Tis and He denote the system and environment Hilbert space. The Hamiltonian of the total system is 
given by the sum of the Hamiltonian Hq of the system S and the Hamiltonian He of the environment, 
plus additional terms describing the couplings of the system with the environment, 

Ho,SE = Ho®1e+1s®He + ^Sc,®E^. (2.32) 

a 

Here, the E^s are supposed to be linearly independent and, without loss of generality, the coupling 
operators Sa are assumed to be traceless. We proceed as in the case of a closed system: By applying a 
time-dependent local control Hc(t) on the system S, the total Hamiltonian becomes time dependent, 

HsE{t)^Ho,sE + H,{t)<»lE, (2.33) 

and we switch to the toggled frame defined by U{t) — U^{t) ®Ie ■ UsE{t), where UsE{t) denotes the 
time evolution operator of the combined system evolving according to (j2.33p . and Uc{t) is defined as in 
(12. 3p as the time evolution operator of the system evolving according to Hc{t) alone. The time evolution 
in the toggled frame is determined by the toggled frame Hamiltonian 

HsE{t) = Ul{t)Hf,Uc{t) ®Ie+Is®He + Y^ Ul{t)SMt) ® E^- (2.34) 

a 

A decoupling scheme {gj}"^^ that applies to all the coupling operators Sa satisfies 

Sa = — y^.9]Sagj = Cq • -J, with c„ = tr{Sa), (2.35) 

Up — u 

for all a. If we use such a scheme in connection with the periodic dynamical decoupling (PDD) control 
strategy, we achieve the desired decoupling from the environment in lowest order AHT: 

Hse = ®Ie +Ts ® {He + ^^") = nf ^Ie+Is^H'^. (2.36) 

a 

As it was discussed before, in the fast control limit, i. e. for At — > and m ^ oo with the total time 
T — m ■ UcAt held constant, lowest order AHT becomes exact and we obtain 

IJ{T) = cxp{-iHglT) = cxp(-ii7o"^r) ® exp{-iH'ET). (2.37) 

For quantum memories the decoupling scheme should also satisfy H^'q '' = c • ^X, so that (up to a global 
phase determined by c) U{T) =Xs ® exp(— iiJ^T). 



2.1.6 Noiseless Subsystems 

Dynamical decoupling was defined as a dynamical control setting in which the time evolution of a 
quantum system is made to freeze. This is achieved by applying a decoupling scheme for the system 
Hamiltonian i/o in a way specified by a certain control strategy (as for example PDD). As a result, the 
average Hamiltonian in the toggled frame vanishes. As discussed in the preceding subsection, for open 
quantum systems in principle the same method can be applied, provided that the decoupling scheme 
also applies to the coupling operators which are responsible for the interacti on with the env ironment. 
A less demanding goal is the dynamical generation of a noiseless subsystem ZanOO ; VKLod j . Instead 



of trying to protect the whole quantum system, control schemes are applied in order to preserve parts 
of the system. Information can then safely be stored by encoding it into such a part. 
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Let G — {5j}"°Q^ be a finite group of order nc, and let R : Qj t-^ — 9j G be a unitary 

representation of G on the d-dimensional system Hilbert space Jis (for our qudit quantum register 
Tis = Hf^ and d — q^). As explained in the introduction in subsection 11.2.31 the representation R 
decomposes into a sum of irreps of G, 

R{G) = ^t,-D(''\G), (2.38) 

where the multiplicity of the irrep labeled by v is denoted as Ti, and the dimension of the irrep D^'^^G) 
is denoted by d^. Since the representation space of R is the system Hilbert space Hs, any of the results 
of subsection 11.2.31 concerning the representation space apply to Tis'- There exists an orthonormal basis 

li, viu) \ v & J, lu = I ■ ■ - T^, TOj, = 1 . . . d^}, (2.39) 

in which the operators gj are block-diagonal, i. e. 

I. m.) = D^'-^g,)],, I, m.) = £ ^L^l^^ (SjOl^^ I. <>• (2.40) 

ml = l 

The subspace of Tis which is spanned by the set of basis vectors with fixed v is labeled by Tii,, 

Hy = span{|i^ nil,) | = 1 . . . t,,, TOi, = 1 . . . d,,}, (2-41) 

and has the form of a tensor space {\v l^, m^) = (g) \mu)), i- e. we write — C,y ig) 'Djy, where the 
dimension of is given by Ti, and the dimension of V^, is given by d^. The Hilbert space decomposes 
as 

^5 = - 0C,®I?,. (2.42) 

Let A — R{CG) denote the group algebra generated by R, and let its commutant A' be defined as the 
set of elements that commute with all the elements in A, A' = {V G C{Ti.s) \ VA = AV for all A e A}. 
According to theorem 1 1.2. 71 the elements of A and A' become block-diagonal in the {\v l^, m,y)}-basis, 



A = ^Ir^® Mat(d^ X d^, C) (2.43) 
^' ^ Mat(r, X T,, C) ® (2.44) 

where 1„ denotes an n x n dimensional identity matrix and Mat(n x n, C) denotes the set of n x n 
matrices with entries in C. 

We start by describing the idea of a noiseless subsystem ZR97a; ZR97lj : LCWQSj . Let us imagine 
that the quantum system 5* under consideration is open and its Hamiltonian is given by equation (j2.32p . 
If _ffo and the coupling operators Sa are elements of A^ we have 

Ho = @Ic,,®D^''\Ho), (2.45) 

and corresponding expressions for the Sa- It follows that information encoded in the Cj^-part of the 
subspace H.^ remains unchanged over time: Let the information be described by p = Slj^i I*) (j| 
and let it be encoded in TLv as 

PC <8) cr-D^ = X! X! Pi3'^ki\i'iuK){vjulA (2.46) 

= l k,l=l 
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time , 



Hx Hx Hy Hx Hy Hy Hx Hy 
xxt xxt xyt y^t zX'^ XZ'^ ZY^ Yl^ 
^ ^ ^ ^— I 

Iq t5 ti t2 ti to 



Figure 2.3: Schematic representation of an Euler decoupling cycle based on the decoupling set Q — {T, X, Y, Z} 
and the generators F — {X, Y}. The above cycle of length tc = |0| ■ |r| ■ At — 8At is based on the Eulerian cycle 
on the Cayley graph of G with respect to F shown in figure ETH It is repeated over and over again. Hx denotes 
a potentially time-dependent control Hamiltonian which generates the generator X, i.e. up to a phase we have 
X — Texp(— i J^' Hx{t')dt'Y Hy is defined analogously. As a result, the applied control generates the gates 
denoted in the second line. 

for some arbitrary a = X)fe'i=i '^ki\k){l\. Denoting the time evolution operator of the total system as 
Us Bit) and assuming that the environment is initially not entangled with the system, we obtain 

a 

Pc^ ® cr-D^ ® te exp^+it . . . ) 
= Pc„ ® Uv,,Eit) {av^ ® te) f/l,„B(t). (2.47) 

Hence the {C^}^^j are indeed noiseless (or decoherence-free) subsystems. In the special case that 
di, = I, Cy is a. noiseless subspace. 

Unfortunately, the interactions of a typical qua ntum system ha rdly allow the existence of large noise- 
less subsystems. Hence Zanardi and Viola et al. ZanOOt VKLO Cl!| came up with the idea to modify the 



interactions in terms of dynamical control, such that the resulting symmetrized dynamics allows for 
larger noiseless subsystems. Let a control scheme Q — {gjlj^o^ length Uc — nQ be defined by a 
unitary projective representation i? of a group G = {QjYjlo acting on the system Hilbert space Hs, 
i.e. gj — R{Qj)- As a result of the applied control scheme (let us assume here for simplicity that we 
use the PDD control strategy in the fast control Hmit), the operators Hq and Sa become 

IIc-l 

Iig{X) = -Y,g]Xg„ (2.48) 

j=o 

with X G {-ffo, So}- Since Ilg{X) commutes with any element gj of the control scheme, it follows that 
Hg(X) is in A' . As a result, the subsystems {Vi^^^izj are noiseless. The standard decoupling scenario 
(Hg {X) — cx for all X g {Hq, Sa}) is included as a special case: If the representation is irreducible, 
the set consist of only one element v and we have = 1 and du = dim(?i5). 



2.1.7 Bounded Controls 

The current chapter of this thesis deals with dynamical decoupling in the bang-bang control scenario, 
i. e. we assume a strong control Hamiltonian such that any applied control pulse may be considered as 
being applied instantaneously. Of course such a scenario is an idealization. This subsection discusses 
the effects of bounded controls. 

In order to analyze the effects of bounded controls, let us assume we apply the control scheme {(?j}"^o ^ 
of length Tic using the fundamental control strategy (also called periodic dynamical decoupling), i.e. 
we repeat the pulse sequence poi ■ ■ • iPn^-ij with pj — gj+ig] for j = 0, . . . , — 1 and gn^ = go, 
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Figure 2.4: Eulerian cycle on the Cayley graph of C/ = 
{I, X, Y, Z} with respect to the generators F — {X, Y}. 
The edges colored by X axe depicted in blue, those col- 
ored by Y are shown in red. 



over and over agair0. But instead of applying the pulses Pj mod instantaneously at times j ■ At, 
J G No, we now assume that each pulse is generated by switching on a possibly time-dependent control 
Hamiltonian Hj{t') for a time Tp < At during the time interval [j ■ At, j ■ At + Tp] such that pj — Pj{Tp) — 
Texp(— i J^"" Hj{t')dt'). As a result, after m € N such cycles of length tc — UcAt, the time evolution 
operator in the toggled frame is given by [/(T = mtc) = exp(— iiJT), where in lowest order AHT H is 
given by equation (|2.12ap : 



= f / dt,H{t„ 



Ainu. 



p,{t')dt' +HQ-{l-Tp/At)]gj. 



(2.49) 



For Tp — > this expression reduces to the corresponding expression (|2.17p of the bang-bang scenario. If 
the control scheme {gj}^^^ is for the simulation of the Hamiltonian Hq with the system Hamiltonian 
Ho, this means that for Tp = we would get 



(2.50) 



with c — tr(iJo) — tr(7?g). For finite Tp the first term within the braces in equation (j2.49p depends on j 
and prevents the bang-bang control condition from above to be fulfilled. 

If the elements of the control scheme Q — {gjYj^^ are defined by a unitary projective representation 
i? of a group G = {fljjJ^Q^ acting on the system Hilbert space Tis, i.e. if we have gj = RiSj), 
this problem may be circumvented by using the so-called Eulerian decoupling proposed by Viola and 
Knill |VKn4 Before we describe their idea, we have to make some definitions. First, let A ~ R{CG) 
denote the corresponding group algebra, and let its commutant A' be defined as the set of elements 
that commutes with all the elements in A. Second, the Cayley graph of Q with respect of to a set of 
generators is defined as follows: 

Definition 2.1.2 (Cayley graph). Let Q — {gjYjl^ be a finite group of order Uc, and let F = {Pili Ji 
be a generating set. Then the Cayley graph of G with respect to F is defined as the directed multigraph 
whose edges are colored by the generators pi G F, such that vertex gj is joined to vertex gk by an edge 
of color Pi if and only if gk = Pigj (or p^ = gkg])- 

Last, an Eulerian path in the Cayley graph is defined as a path which uses each edge exactly once. 
The proposal of Viola and Knill is now to replace the basic PDD cycle of length Uc = |^| by a cycle 



tin subsection 12.1.31 the original definition of pj was pj 
the basic cycle with go instead of g„^ — i. 



■ 9j9\—\- Here it is changed it to pj = gj+\g^- in order to close 
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corresponding to an Eulerian path of length nc ■ |r|. As a consequence, instead of (j2.49p . we obtain in 
lowest order AHT 

where, as before, Pi{t) — Texp(— i Hi{t')dt') is generated using a possibly time-dependent control 
Hamiltonian Hi (i = 1, . . . , |r|). By using the definitions 

nc — 1 

ne(^) = - E 5! (2-52) 

|r| 



■ n 



ir| 

= r P\(t') X p.{t')dt' , (2.53) 



this expression can be written as 

= ng(Fr(i/o)) • ^ +ng(ffo) • (At-Tp)/At. (2.54) 

Due to the following theorem this is equal to lig (-ffo) and we arrive at the standard control condition 
(|2.50p of the bang-bang scenario. 



Theorem 2.1.2 ([VK03|). Let X be any time-independent operator acting on the system Hilbert space 
TLs- If the control Hamiltonians Hi(t) are in the group algebra A = i?(CG) for all t G [0, Tp] and all 
ze{l,...,|r|}, then ng{Fr{X)) =Ilg{X). 

Proof If Hi{t) eAit follows that p^{t) e for alH G [0, Tp] and alH e {1, . . . |r|}. Hence, Fr{Y) = Y 
for any time-independent operator Y e A'. We are now going to show that Q{X) = Ilg(^Fr{X)) is a 
projector. First, we note that Q'^{X) = ng{Fr{Ug{Fr{X)))) = Ug{Ug{Fr{X))) , which follows from 
Fr{Y) = F for F e By using the fact that Ilg is a projector, we find that Q^{X) — Q{X). Since 
the range of Q is in A' , we have Q = Ilg if and only if Q acts on A' as the identity. Let Y A' , then 
QiY)^Ug{Y) = Y. □ 

As an example we consider the decoupling scheme for one qubit given by the Pauli group Q — 
{T, X,Y, Z}. As a set of generators we choose F = {X,Y}. The Cayley graph of Q with respect 
to F is shown in figure [2131 An Eulerian path is obtained by following the numbers 1,...,8. The 
decoupling cycle corresponding to this path is depicted in figure 12.31 

The above method increases the length of a basic PDD cycle by a factor |F|. For loca l syst em 
Hamiltonians shorter decoupling schemes may be devised using Eulerian orthogonal arra ys IWocOGil . 
For a geometric perspective on the theory of decoupling with bounded controls we refer to Che06l |. 



2.2 Decoupling Schemes 

A decoupling scheme for the system Hamiltonian Hq acting on the system Hilbert space Hs was defined 
in definition 12.1.11 as a set of unitaries {ffjjj^o^ ^^'^ relative times {Atj}^!L^^ such that 

1 "'"^ 1 

- E 9]HogjAt, = tr(i/o) • ^I, (2.55) 

where tc = X]j=o^ ~ dim(7i5). In this section we give an overview over known decoupling 

schemes for different types of system Hamiltonians. All these schemes work with constant relative time 
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intervals, i.e. Atj — At for all j G {0, . . . , nc — 1}. Since the quantum system under consideration 
forms a quantum register consisting of n qudits of dimension q we have Tis = 7i^" and the local control 
assumption requires the unitaries gj to be of the form gj — g[^'''^ ® 9^''''' ^ • • ■ (8) g^'''\ where g^*'"''' 
denotes the unitary g^*'-'^ € being applied to the fc-th qudit. 



2.2.1 General Hamiltonians 

We start with decoupling schemes which apply to all traceless Hamiltonians Hq acting on Tig. 
Definition 2.2.1. An annihilator is a decoupling scheme {gj, Atj}"!^^ satisfying 



- 2^ 9]Hog,At, = 0, (2.56) 
j=o 



for all traceless system Hamiltonians Hq. 



It was shown in WRJB02al | that an annihilator has to contain at least Uc = dim(7i5)^ elements gj 
and that the relative times for such a minimal annihilator have to be equal, i. e. Atj = At for all 
7 € jo, ■ ■ . 1 »e ~ !}• Annihilators can be found using the following group-theoretic averaging procedure 



Zan99l : IVKL99 |. 



Theorem 2.2.1. Let G ~ {Bj}^=o^ finite group of order n^, and let R : Qj ^ gj G Ud he an 

irreducible representation of G on a d-dimensional Hilbert space TLs- Then, for any Hq G C{TLs), 

1 """^ 1 
n«(G)(Ho) = - E 9]H^9j = tr(i/o) • -^I. (2.57) 

^ i=o 

Proof. First we note that the left hand side of the above equation commutes with all the unitaries gj. 
Since the gj form an irreducible representation, Schur's lemma ftheorem ll.2.4p tells us that the only 
operator commuting with all the gj is a multiple of the identity. The correct factor is obtained by taking 
the trace on both sides of the equation. □ 



This theorem was shown in WRJB02al | to hold for irreducible projective representations as well. Since, 
by definition, any nice error basis (see definition 11.2.16]) forms an irreducible projective representation, 
it can be used as an annihilator. A particular example for a nice error basis — and hence for an 
annihilator — for Tis = Hf " is the set of Pauli operators, 

^{XZ{d)\ae¥l"}, (2.58) 

as defined in section [L^ 

Decoupling according to theorem 12.2.11 corresponds to the special case of a dynamical generated 
noiseless subsystem fsubsection l2.1.6| ) which is identical with the whole system. 



2.2.2 Local Hamiltonians 

Let us first define a map mapping an operator of the form A — A''^^ ® • • • Ai*-* acting on Ti^" to an 
operator acting on 7i^" with n> s via 

^ ^ M = 4? ® • • • ® 41 ^^{l,2,...,n}\{k^,...M, (2-59) 

for any 1 < ki < k2 < ■ ■ ■ < < n. Here, the index i in A'f ^ indicates that the operator A'^^'^ G ^{T^q) 
acts on the i-th qudit. Using this kind of notation, a i-local Hamiltonian is defined as follows: 

t n— s+l n—s+2 n 

^o = E E E ■■• E E 4^-"= [^^(«)] (2-60) 

s=i ki=i fe2=fci+i fc3=fes_i+i seF2'>\{o} 
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Since the Pauli operators form an operator basis, any Hamiltonian that couples no more than t of the 
qudits can be written as in ([2.60^ . DecoupHng schemes for t-local qubit Hamiltonians (g = 2) have 



been devised by Leung [Leu02i in terms of Hadamard matrices and by StoUsteimer and Mahler SMOl | 
using or thogonal arr ays [HS S99]. The orthogonal array approach was g eneraliz ed to qudits by Wocjan 



etal. in WRJB02b |. Eventually it was shown by Rotteler and Wocjan RWOd | that both methods are 



equivalent. We proceed explaining the generalized orthogonal array approach. 

Definition 2.2.2 (Orthogonal arrays). Let A be an alphabet containing a symbols. An orthogonal 

array OAx{nc, n, t, a) with a levels, strength t and index A is an n x ric matrix M — (rriij) with entries 
from A if any s x Uc sub-matrix (obtained from M by selecting s rows) contains any possible s-tuple of 
elements from A exactly A times as a column. 

Let {uijJ^Q denote an annihilator for the one qudit Hilbert space Tiq (for example we could choose the 
set of Pauli operators, i. e. {ui}J^ — Vq). Given an OA\{nc, n, t, q^) with levels, a control scheme 
{ffi}J=o^ can be obtained as follows: The j-th unitary gj is constructed using the {j + l)-th column of 
the orthogon al array as 



' Q n = Urm j+i 'S> j+i 'S> • • ■ Um„j+i- The foUowing theorem due to Wocjan 
shows that such a control scheme is in fact a decoupling scheme for 



and Rotteler [WRJB02t 
any t-local Hamiltonian. 

Theorem 2.2.2. A control scheme {gj}^^^ constructed from an OAx(nc,n,t,q^) with q^ levels and 



strength t as described above, is a decoupling scheme for all t-local Hamiltonians acting on Tis 



— 1 

Proof. The annihilator {ui\1^Q for the one-qudit Hilbert space Tiq consists of the elements of a nice 
error basis for operators acting on Tiq. Hence the collection of all s-fold tensor products of the UiS 
forms a nice error basis for Tif^ and we obtain 



1 



g -1 

E 



(2.61) 



for all traceless Hamiltonians H acting on Ti.®'' . Let us pick now the term characterized by {ki . . . kg) 
and a from the i- local Hq given by (|2.60p . For the control scheme {gj}^^^ constructed from the OA 
we obtain 



ric-l 



9j 



^ Tic 

- E«. ® ■ ■ ■ ® "".J -Js'-"' [xz{d)] (u™,,^. ® • 

^ no 

ER., ^. ® • • • ® ul^^ J XZ{a) (u™,^,^. ^ • • • 
1 '''' 

4""'''— E {u\^®---®ul) XZ{d) {u,,®---®u,^) 



(fel.../ca) 

= 0. 



(2.62) 



(fei...fc.) 



The last line is obtained by noting that the OA contains each possible s-tuple (with s <t) with entries 
in equally often. □ 

Remark. A decoupling scheme {g^lj^o^ '^'-"^ ^ i- local Hamiltonian acting on 7i^" based on an orthogonal 
array OA{nc, n, t, q^) can be extended to a decoupling scheme {g'j}"^^ for a t-local Hamiltonian acting 
on 7i®"+^ by setting g'^ = {gj){i...n} ^^n+i, as long as there are no local terms in the Hamiltonian 
which act only the (n + l)-th qudit. 
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Physical interactions are typically described by 2-local Hamiltonians. Hence orthogonal a rrays of 



strength two are of special importance. Using a construction method based on Hamming codes |HSS99l . 
chapter 5.3], orthogonal arrays OA(^s\ (s* — l)/(s — 1), 2, s), with s being a prime power (here s = q^) 
and « > 2, can be obtained. It follows that any 2-local Hamiltonian acting on up to n qudits of dimension 
q can be decoupled using a decoupling scheme {gj}"^Q^ of length n^, where an upper bound on Uc is 
given by Uc < n{s — l)s + 2s — s^. Even though this bound is far from optimal (orthogonal arrays exist 
which cannot be obtained by the Hamming code method), it shows that the length of a decoupling 
scheme scales linearly with the number of qudits. In the appendix IA.2I we list the orthogonal arrays 
0^(16,5,2,4), OA(32,9,2,4) and OA(48, 13, 2, 4), which can be used to decouple up to 5, 9 and 13 
qubits, respectively. 

Diagonal Couplings 

Let us consider now the special case of an n-qubit Hamiltonian Hq involving only bipartite couplings, 

n— 1 n 

^"=E E E (2.63) 

fci = lfc2=fci + l 36F|\{0} 

These kind of couplings are called diagonal couplings, since the coefficient matrix is diagonal when 
compar ed with the one for the general case (X^s c Ja,cXZ{d) XZ{c)) . It was shown by StoUsteimer and 
Mahler ISMOl| tha t such H amiltonians can be decoupled using decoupling schemes constructed from 



difference schemes |hSS99|, chapter 6]. The advantage over corresponding decoupling schemes using 
orthogonal arrays is the shorter length of such schemes. We generalize this approach to the qudit case. 
For qudits of dimension q > 3 let us consider the Hamiltonian 

n — 1 n 

^^"=E E E 4"''[xm®XZ\a)]^^^^^^y (2.64) 

fel=lfc2=fcl+l aeF2\{0} 

For Hq to be Hermitian, the coefficients must satisfy J^^'*^^ = gjj^j.g xZ{~a) ® XZ\—a) — 

XZ{a)^ (g) XZ{a). It follows that the Hamiltonian is symmetric with respect to fci and ^2. 
Remark. Note that interactions of the form (|2.64p might be of interest for quantum computation, since 
the swap gate, UswAp\(f>) 'S) = IV') 10); which can be written as 

t/swAP = 4 E ^^(«) ® XZ\a), (2.65) 

can be generated (up to a global phase) as ?7swap — exp(— jiJswAp7''/2) by the interaction 

i?swAP = - XZ{a)<»XZ\d) (2.66) 

3eF2\{0} 

which is of the form (I2.64p . In the qubit case the square root swap gate — exp(— «iJswAp7i'/4) — in 
connection with all single qubit gates forms a universal set of gates. 

Definition 2.2.3 (Difference schemes). A difference scheme D{nc, n, s) based on a finite abelian group 
{A, +) of order s is an n x Uc matrix M = {niij) such that for all 1 < i < j < n, the vector difference 
between the i-th and the j-th row contains each element of A equally often. 

Necessa rily ne is a multiple of s. It can be shown that if a difference scheme D(nc,n, s) exists, then 
n<nc |hSS99I . chapter 6]. 

Let the set of Pauli operators be given by Vq — {XZ{a) \ a € F^}. Given a D{nc, n, q^) based on F^, 
a control scheme {gj}"^Q^ can be constructed as follows: The j-th unitary gj is constructed using the 
(j -i- l)-th column of the difference scheme as gj = XZ{mij+i) (8) XZ{m2j+i) • • • XZ{mn,j+i)- 
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Theorem 2.2.3. A control scheme {gj}"^Q^ constructed from a D(nc,n,q'^) as described above, is a 
decoupling scheme for all n-qudit Hamiltonians involving diagonal qudit-qudit couplings as in (I2.64p . 

Proof. Let us pick a single term characterized by (fci,fc2) and a from Hq in (j2.64p . For the control 
scheme {gj}"^^ constructed from a D{nc, n, q^) = (ruij), i = 1 . . .n, j = 1 . . . Uc, ruij G F^, we obtain 

-Ha] 4'^''[XZ{a)®XZHa)]^^^^^^^g, 

= — ^ XZt(TOi,j) (g) • • • ® XZ^'imn.j) 4''^^ [XZ{a) ® XZ'^ {a}] ^ XZ{mi,j) (g) ■ ■ ■ (g) XZ{m^,^) 
1 

= •^s'''''— ® ^Z\mk,,j)) {XZ(a) g, XZ{a)^) {XZ{mk,^j) ® XZ{mk,,,)) 



(kiM) 



Using the symplectic inner product as in (|1.30p . the order of the Pauli operators can be inverted leading 
to 



J^'^''^XZ{a)(g)XZ^a) 
J^'^^'XZ{a)g>XZ^{ci) 



(fci,A;2) j — i 



" = 0. 



(2.67) 



The last line is obtained by noting that in the difference scheme (rriij), with mij e F^, the vector 
difference between row fci and k2 contains each element in F^ exactly nd s times. As it can be seen 
from the last two lines, the position of the dagger operator is not important: The decoupling scheme 
also eliminates couplings of the form XZ{a)^ ® XZ{a). □ 



Construct ion met hods for difference schemes D{q™ , q™ , q^) with q prime and m > 2 are known (see 
for example |HSS99l . chapter 6.1]). It follows that any Hamiltonian with diagonal couplings between up 



to n qudits of dimension q can be decoupled using a decoupling scheme {gj}^^^ of length Uc, where an 
upper bound on Uc is given by Uc < nq — q. This bound is of the order 0{nq) and has to be compared 
with the bound for orthogonal arrays which was 0{nq'^). In the appendix lA.ll we list difference schemes 
D{AX, 4A, 4) for A G {1, 2, 3, 4}, which can be used in order to decouple up to 4A qubits, respectively. 

There exist diagonal couplings for which even shorter decoupling schemes can be devised. A famous 
example are dipolar inter-qubit couplings, 



n-1 

E 



jfci,fc2^2Z(g)Z- 



X X - Y ®Y\ 



(fci ,/C2 



(2.68) 



for which a decoupling scheme of constant length tt-c = 3 is given by the set {gj}^^i WHH68t of 
non-selective n/2 pulses, 



9j 



( i 

expy~-aj—j , with ttj = X, y, Z for j = 1, 2, 3. 



(2.69) 



The 7r/2 pulses convert the diagonal terms in the Hamiltonian Hq in a cyclic manner, thereby achieving 
the decoupling condition Hi + H2 + H3 ^ with Hj — g^Hogj. 
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2.2.3 Selective Decoupling 

In the preceding subsection, among others, decouphng schemes for general and diagonal Hamiltonians 
involving only bipartite inter-qudit couplings have been presented. These schemes turn off all qudit- 
qudit couplings in 

n— 1 n 

^o=E E E (2.70) 

ki = lk2 = ki + l s,be¥^\{0} 

or its diagonal counterpart (|2.64p . Under certain circumstances we might want to keep one (or more 
than one) particular coupling alive, i. e. we want to simulate the Hamiltonian 

^0= E (2-71) 

a.be¥l\{0} 

for some fixed pair (ki, with \ < ki < < n. This control task is called selective decoupling. An 
example for such a scenario is a quantum computer in which the two qudit gates are generated by the 
qudit-qudit couplings. A control scheme {g'jYj^)^ for the simulation of H'q can easily be obtained from 



the corresponding decoupling scheme {gj}"^o^ follows |SMOl| : Let gj be given by ® 52^'"*^ 
•••(g) gi"'''^ where p^*'"'^ denotes the unitary 5^*'^^ being applied to the fc-th qudit. We set g'^ — gj and 
apply the following modifications: 

• For general couplings, the decoupling scheme was constructed with the help of an orthogonal 
array. To keep the (fci, fc2)-coupling, we replace the unitaries 5^^^'"'' and g^^^'^^ by Xfc^ and X^^. 

• For diagonal couplings, the decoupling scheme was constructed with the help of a difference 
scheme. To keep the (fci, fc2)-couphng, we replace g^l^^'^^ by g^l^^'^^ (or vice versa g^^^'^^ by 5^.^^'"'^). 

2.2.4 Nearest-Neighbor Couplings 

A general 2-local n-qudit Hamiltonian involves couplings between up to n(n — l)/2 pairs. If the 
only inter-qudit couplings involved in are nearest-neighbor couplings and the qudits are arranged 
on a linear chain, i. e. if 

^0 = E E [^Z{a) ® XZ{c)] (2.72) 

far shorter decoupling schemes can be devised as the ones discussed in the preceding subsection. Let 
{M(j)}j^Q^ denote an annihilator for the one qudit Hilbert space Tiq. A decoupling scheme {5j}"^o^ 
constant length Uc = can be constructed by letting the elements of the annihilator act on the even 
numbered qudits, i. e. by setting gj —Ii® u{j)2 (g I3 (g w(j)4 (g . . . for all j £ {0, . . . , — 1}. 

Theorem 2.2.4. An n-qudit Hamiltonian Hq involving only nearest-neighbor couplings as in (I2.72p 

can be decoupled using a decoupling scheme of constant length Uc = q^ as it is described above. 

Proof. Let us pick a term in (|2.72p with odd k (for even fc the proof goes analogously) . Then, 

^ ric — 1 

- E 9] 4f'[XZ{d)^XZic)]^^^^^^^ g, 

= — E (^1 "(•^■)2 "0')4 ■ • • ) [^^(a) ® XZ{c)\ (Xi ® U{j)2 (g I3 <^ U{j)i ...) 

= 0. (2.73) 



XZ{d) ® (- E HjyXZ{c)u{j)) 



-q 



(fc,fe+i) 
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The last step is due to the fact that the set {it(j)}'^^Q forms an annihilator and XZ{c) is traceless for 

' q 



ceF2\{0}. □ 



2.3 Control Strategies 

Dynamical control over a local Hamiltonian allows the time evolution of a quantum system to be 
modified. In the bang-bang scenario, a control scheme consisting of a set of unitaries generated by 
the local Hamiltonian, is used to achieve a certain control task. For example, for a closed quantum 
system, we might want to simulate a time evolution according to a Hamiltonian which is different from 
the system Hamiltonian. In particular, the simulation of a vanishing Hamiltonian is called decoupling. 
For an open system, we might try to generate a noiseless subsystem (see subsection I2.1.6P . For all 
these tasks, the fundamental control strategy (as discussed in subsection 12. 1.3p is to apply the pulses 
determined by the control scheme with the help of the local control Hamiltonian over and over again. 
Assuming the pulses to be ideal, the finite time interval in between subsequent pulses is the only obstacle 
preventing a control task to be achieved in a perfect manner. For the task of decoupling, it was shown 
in subsection 12.1.41 that the fundamental control strategy (PDD) leads to an average fidelity decay 
which is quadratic in time. The strength of the decay is determined by (i) the strength of the system 
Hamiltonian, (ii) by the length of the decoupling scheme, and (iii) by the time interval At in between 
subsequent pulses. 

In this section, we consider control strategies which improve the average fidelity decay of a given 
decoupling scheme for a fixed time interval At. The standard technique used by the nuclear magnetic 
resonance (NMR) community is a symmetrized version of the PDD strategy, which leads to a dec rease of 



the strength of the decay, but keeps its quadratic-in-time nature. In the author's diploma thesis [Ker04| 
it was observed that a control strategy based on a random selection of the elements of a decoupling 
scheme leads to a fidelity decay which is only linear in time. S ubsequently, randomized decoupling was 



proposed for open quantum systems by Viola and Knill 'VKO Sj . The line ar- in-time decay was confirmed 



by constructing a lower bound on the worst case fidelity [VKOSi : IVio05l | . Control strategies combining 



the advantages of purely deter ministic and randomized strategies have been devised by the au thor 
[KA05] and by Santos and Viola [SVOd IVSOfit . and have been explored numerically for open |SV05I | and 



closed systems [SV08|. We start presenting the deterministic strategies in subsection l2.3.1l and proceed 
with the randomized strategies in subsection l2.3.2l For most of the strategies we calculate a short time 
expansion of the average fidelity decay, which allows us to discuss the advantages and disadvantages of 
a certain strategy. Even though we focus on decoupling, the control strategies discussed in this section 
are applicable to other control tasks as well . We label the strategies using the abbreviations introduced 
by Santos and Viola in [SVOfil : IVSOfil : ISVn4 



As in the preceding chapters, let 5 be a closed quantum system defined on a finite-dimensional Hilbert 
space Tis of dimension d = dim{T-ls), and let its Hamiltonian be given by Hq acting on Tig. Without 
loss of generahty Hq is assumed to be traceless, i.e. tr(iJo) = 0. Occasionally, we write Hq as XHq 
and use powers of A to indicate the dependence on Hq. We assume that a certain decoupling scheme 
{ffi}j=o^ of length ric for Hq is given. 

2.3.1 Deterministic Strategies 
Periodic Dynamical Decoupling (PDD) 

The fundamental decoupling strategy, as described in subsection 12.1.31 is called periodic dynamical 
decoupling. At the time ti — i ■ At, i £ No, the local control Hamiltonian is used to generate the pulse 
Pi mod Tia J where pj = gjgj^i (for j = ... nc — 1) is defined in terms of the elements gj of the decoupling 
scheme by setting g-i = <?«<,-! with the exception that the first po is simply given by p'^ = go (compare 
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with figure [nH])- As a result, the time evolution in the toggled frame after the time T ^ m ■ tc with 
m G N and tc = UcAt is given by 

U{T ^m-tc) ^ (exp(-ii?„^_iAt) . . .exp{-iHiAt) exp{-iHaAt)] = cxp{-iHtc ■ m), (2.74) 

with Hj — g^Hogj. The zeroth order term in the Magnus expansion of H vanishes by definition of the 
decoupling scheme, 

nc-l 

H^"^ = - E 51^05, = 0, (2.75) 

3=0 

and, as it was shown in subsection l2.1.4l the decay of the entanglement fidelity, 

1 

— 1 
d 



fPDD(t) = 1 _ 1 tr((S=^'V)r2 + 0{XhlT^), (2.76) 



Fr°,{T) = cxp(-itr((i?^^V)T2), (2.77) 
is in lowest order only due to the first order term in which is given by (|2.15bp : 

Tie — 1 

H^'^ = E iH.„H,]At = 0{Xh,). (2.78) 



A strict lower bound on the worst case fidelity (j2.20p was given in VK05l | by using the matrix norm 



|jA||2 = max I eig(vv41\A)| and setting k ~ ||i?o||2, 

FPD°(T) > 1 - kHIT^ + 0{KhlT^). (2.79) 

In summary, the fidelity decay using PDD is of the order 0{\^ij.T^) and is caused mainly by the 
first order term (|2.78p in the Magnus expansion of a single PDD cycle of length tc — UcAt. Suppose we 
cannot decrease the time interval in between pulses below a certain value At. Then, to optimize the 
fidelity decay of the PDD strategy, we have to find a decoupling scheme as small as possible (i. e. we 
minimize Uc). The performance of a minimal decoupling scheme may be optimized further by noting 
that the first order term (j2.78p depends on the order of the elements gj in the decoupling scheme: 
There are Ucl possibilities and the term tr((i? ) )/^ becomes minimal for the new decoupling scheme 
{dj} specified by g'j = g-K(j), where tt S denotes a particular permutation of 0, 1, ric — 1. We 
might also say that tt denotes a particular path which traverses the elements of the decoupling scheme. 
Unfortunately, such an optimal path is hard to find, depends on iJo, and the improvement might be 
relatively small. 

Symmetric Dynamical Decoupling (SDD) 

The decoupling technique commonly used by the NMR community is a symmetrized version of the 
PDD strategy. We call it symmetric dynamical decoupling. Let us construct a symmetrized decoupling 
scheme {ffjlj^o^ '^^ length n'^ — 2nc from the given decoupling scheme {gj}"!^^ of length Uc as follows: 

, I (7, for j — 0, . . . ,?ic — 1 

93 ' ' : ^ • (2.80) 

[92n,-i-j for J = ric, . . . , 2nc - 1 

The SDD strategy is to apply the new scheme using the PDD strategy. As a consequence, the time 
evolution of a single SDD cycle of length t'^ ~ n'^At in the toggled frame is given by 

U{t'c) = cxp{-iHoAt) exp{~iHiAt) . . . exp(— iiJ„^_i At) X 

exp{-iHn^^iAt) . . . exp{-iHiAt) exp^-iHoAt) = exp{-iHt'c) . (2.81) 
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Each cycle is symmetric in time, and according to theorem l2.1.11 all odd orders in the Magnus expansion 
of H vanish. Hence, any resulting error is generated mainly by the second order term (j2.15cp . 

c i>j>k=0 

rr ~ - -, ~ A . T I 1/2 if i = 7 or 7 = fc 
[[^/W>^/0)]^^/w])Ai'x j^^ ^^^^ , (2.82) 

where /(i) = i for i g {0, . . . , ric — 1} and /(i) — 2nc — 1 — i for i € {tt-c . . . , 2nc — 1}. The above 
expression can be simplified as explained by the following lemma. 

Lemma 2.3.1. The second-order term in the Magnus expansion of a single SDD cycle as given by the 
above equation is equal to the second- order term in the Magnus expansion of the corresponding PDD 
cycle, i. e. 

H^'' = -^ "E ([^Ui?.,i?.]] + [[i?.4i^d)At^x|'/' ^fi=JorJ = k^ 

Proof. Let us divide the interval [0,ty into the two subintervals [0,tc] and [ic^cl- If '^^ calculate the 
average Hamiltonian for each of these subint ervals, we obtain vanishing zeroth-order terms of the form 



of equation (|2.75p . The results presented in BurSlL section IV. D] state that in such a case the second- 



order term of the entire interval is given by the sum of the second-order terms of the subintervals, 
divided by two. The proof is finished by noting that the second-order term of each of the subintervals 
is given by (E^. □ 



Analogously to equations (|2.76p . (|2.77p and (|2.79p . we obtain the expressions 

fI°°{T) = 1 ~ J tr((i7^^y + OiX^t'^T"^), (2.84) 

i^f,^,(T) =exp(-itr((i7(^V)T^), (2.85) 

fT°{T) > 1 - kXT^ + Oinh'^T^), (2.86) 

and the estimate F^^^ = 0{X^tl). 

In summary, the fidelity decay using SDD is of the order 0{X^t'^T^) and is caused mainly by the 
second order term (|2.83p in the Magnus expansion of a single SDD cycle of length t'^ — 2ncAt. For 
Ktc < 1 this is an improvement over PDD in the sense that the strength of the SDD decay (©(A^t^)) is 
smaller than the corresponding PDD strength {0{X'^t^)). As it was the case for PDD, the performance 
of SDD might be optimized further by choosing an optimal path tt e S„^ traversing the elements gj of 
the underlying decoupling scheme, i. e. an order of the elements such that tr((i/ ) ) /d is minimal. 

Higher Order Decoupling 

A natural question is whether the SDD approach can be generalized to suppress even higher order terms 
in the Magnus expansion. For a given decoupling scheme of length Uc, we have the set {-ffj}"^o^ of 
toggled frame Hamiltonians. Is there a set of indices {j(j)}t=ij S {0, . . . , ric — 1}, and relative times 
{Ati}fLi of length N such that the sequence 

AT 

U{T ^^At,) = exp(-iifj(jv)AiAr) . . .exp(-iffj(i)Ati) = exp(-ii7r) (2.87) 
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has vanishing zeroth, first and second order terms in the Magnus expansion ? (SDD is obtained for 
N = 2nc, Ati = At, T = 2ncAt and = {i for i = . . .Uc ~ I and 2nc ~ 1 — i for i = Uc . . . 2nc — 1}. 
It leads to a vanishing zeroth and first order term.) According to (|2.15cp . the second order Magnus 
term is of third order in Hq. Sets {j{i)}fL-^ and_{Ati}^^ of length N satisfying H ^ ©(iJo)™ can 
be found using a Trotter- Suzuki decomposition Suz9l|, but according to the non-existence theorem of 
positive decompositions (ibd.), they always involve negative times Ati for m > 4. T his fact forbids 
general higher order decoupling according to some simple rule (see also the comment in (KLOTI . section 
V]). (Nevertheless, there exist specific examples for which second order decoupling is achievable by 
re petition of a decoupling scheme traversing a series of different paths, see for example the 'H2' scheme 
in [SVOSt .) 



Concatenated Dynamical Decoupling (CDD) 

When using the PDD strategy, the time evolution of a single cycle in the toggled frame is given by 
(EZH), 

■ = exp{-iHn,-iAt) . . . exjp{-iHiAt) exp(-z/foAi) = ex.p{-iHtc)- (2.88) 

Khodjasteh and Lidar proposed a concatenated dynamical decoupling strategy KLOSj ]. which tries to 
fight the remaining higher order terms in the Magnus expansion of H as follows: As a first step, the 
basic PDD cycle is embedded into an additional one, 

U{n, ■ t,) - gi^_^U{tc)gn^-i • . . . • g\U{t,)gi ■ glU{t,)go, (2.89) 

leading to a cycle of length . We may now either repeat this cycle over and over again (called periodic 
concatenated level 2 decoupling (PCDD2)), or iterate the embedding process one more time to obtain a 
cycle of length nj?. After k recursive embeddings, one obtains a cycle of lengt h n^. Periodic decou pling 
with such a cycle is called periodic concatenated level k decoupling (PCDDk) SV06 : VSOd SV08j |. The 
CDD strategy is to repeat the embedding process ad infinitum. 

In order to achieve a good performance with CDD, the underlying decoupling scheme should be able 
to suppress the correlations in the remaining effective Hamiltonian of the fc-th embedded cycle for 
increasing k. Since these correlations increase with k, we expect CDD to work best when the decoupling 
scheme is an annihilator of short length Uc- Due to the fact that the length of a minimal annihilator is 
equal to the dimension of the system Hilbert space, it will be h ard to meet this criterion. In fact, CDD 
was proposed to decouple a single qubit from its environment KL05l |. in which case an annihilator of 
length four is given by the Pauli operators 1, X, Y, and Z. 



2.3.2 Randomized Strategies 
Naive Random Decoupling (NRD) 

The simplest randomized control strategy is to apply the pulses pi at times ti ~ iAt, z G No, where 
Pi = gr(i)gl.{^i^i) is constructed by picking the elements of the decoupling scheme at random: The indices 
r{i) e {0, . . . , ric — 1} are chosen independently according to a uniform distribution. As a result, after 
a time T = tn the time evolution operator in the toggled frame is given by 

IJ{T = tN) = exp(-i^r(jv_i)Ai) . . . e-xp{-iHr(i)At) e-xp{-iHr{o)At). (2.90) 

The resulting decay of the entanglement fidelity (j2.25p (corresponding to the average state fidelity) 
depends on the particular choice of indices. To obtain a general statement, we take the average over all 
random realizations (denoted by E), i. e. we define 



F^^°{T) = V. - iY{U{T)) 



1 



(2.91) 



as the relevant performance measure. 



38 



2.3 Control Strategies 



Theorem 2.3.2. In lowest order, the average NRD fidelity (|2.9ip is given by 

pNRD^j,^ = 1-1 tY{Hl)AtT + 0{X^At^T). (2.92) 

Proof. Writing Hq as XHq, we calculate the fidelity (|2.9ip up to fourth order in A. This allows any 
result to be used later on to obtain the variance of the fidelity. We start by expanding each of the 
products in (|2.90p as 

exp(-*iJ,(,) At) = J - tHris)At - ii?,^.) At^ + At^ + ^H^^^^At' + ©(A^), (2.93) 

with < s < N — 1. Taking the trace leads to 

J ^<UiT)) = 1 - ^ E ^ tr(#,^(,)) At^ - E ^ tr(H.(.,#.(„)) + ^ E ^ tr{H^ri.,)At^ 

s s>u s 

E^tr(iJ,(,)iJ,%)+i/,%)i7,(„))Ai3 + z ^tr(i7,(,)i/,(„)7?,(,))Ai3 + ... + 0(A5). (2.94) 



s>u s>u>v 



The fidelity is obtained by averaging the absolute square of the above expression over all random 
realizations. With the help of the decoupling condition (|2.16p for traceless Hq, 



^ Tic — 1 

- E 4- = 0, (2.95) 



and due to the independence of the random selections, we obtain 
1 



E 



tr([/(r)) =l--tv{H^)AtT+-[-tr{H',)AtTj + --tr{H^)At^T 



2 Ur ^—^ n, 

j=0 j'=0 



11 ^ 



tr((-^- E ^')')Ai'T(T- At) + 0(A5). □ (2.96) 



id \\n^ 

Remark. As it turns out by looking at various numeric examples, a good approximation of (|2.9ip . valid 
for all times T > and in lowest order identical to (|2.92p , is given by 



1 



i^e'appW = exp --tr(i72)AiT . (2.97) 



A strict lower bound on the average worst case fidelity was given in [VK05l | , 

F^^^m=E min \{iP\U{T)\ilj)f>l-AK^AtT + 0(K^At^T), (2.98) 

Wens 

with K = ll-ffolb- The bound remains valid for time-dependent system Hamiltonians Ho(t) if ||i?o(^)||2 < 
K ior < t < T and the decoupling condition (|2.55p is satisfied for < t < T. F or an appropriate 
redefinition of k, the bound applies to open quantum systems as well VKOSi : Vio05| . 

In summary, NRD offers some interesting advantages over deterministic strategies like PDD and SDD: 
The fidelity decay (O(A^AtT)) is only linear in time, while it is quadratic in time for PDD and SDD. 
The strength of the decay does not depend on the length Uc of the underlying decoupling scheme. As 
a consequence, it is always possible to choose an annihilator as decoupling scheme. Since the lower 
bound guarantees a linear decay also for time dependent Hamiltonians, it is possible to apply NRD 
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even if the system Hamiltonian is completely unknown. An additional advantage over PDD is that the 
NRD strategy remains applicable if we use bounded control instead of bang-bang control (a fact that 
turns out in subsection I3.2.4p . while the PDD cycles have to be replaced by the longer Euler cycles 
of subsection 12.1.71 A disadvantage is the higher strength of the d ecay (O iX^At)) compared to PDD 



and SDD {0{X'^tl) and 0{X^tj), respectively). As pointed out in [VK05l |. NRD outperforms PDD if 
K^AtT • ^ 1, i. e. for long times and/or long decoupling schemes. 



The linear-in-time fidelity decay of NRD was first observed in the author's diploma thesis [Ker04, 
chapter 4.2] where a quantum memory consisting of n = 10 qubits was protected against inter-qubit 
couplings by using a decoupling scheme of length Uc — 4" given by the set of Pauli operators • 
it will be shown in section [221 in contrast with any periodic strategy, NRD allows the protection of a 
quantum computa tion in which the quantum gates are applied in between subsequent decoupling pulses 



KAS05 : GKA JOsI . In this context, NRD using a decoupling scheme given by the set of Pauli operators 



was called Pauli random error correction (PAR EC). 

For any decoupling strategy which involves some kind of randomization, in addition to the average 
fidelity, an important quantity is its variance. It is a measure of how close the fidelity of a single run 
comes to the average fidelity: The smaller the variance, the smaller the expected difference. 

Theorem 2.3.3. In lowest non-vanishing order, the variance of the NRD fidelity (j2.9ip is given by 

1 ""^3 1 1 2 

al^o{T) = 2T{T~At)- ^ " E il^<H,H,,)) At' + OiX'). (2.99) 



Proof. We calculate the quantity 

al^oiT) = e(| - tr(;7(r)) | ) - (e| - tr(;7(r)) I ) (2.100) 

up to fourth order in A as it was done in the proof of theorem l2.3.2l The term whose square is subtracted 
on the right hand side is given by (|2.96p . □ 

Remark (i). Equation (|2.99p can be upper and lower bounded as follows: Using the fact that {A, B) = 
ix{A^ B) denotes the Hilbert-Schmidt inner product, the Cauchy-Schwarz inequality, | {A, S) P < {A, A) ■ 
{B, B), in connection with T{T — At) < leads to an upper bound. Since the averaging is performed 
over a non-negative expression, we obtain a lower bound by picking the elements where j — j' . Alto- 
gether, 

^^^^J^'^ (^tr(gg)A^)' < a^,,(T) < 2(i tr(i7o^)AiT)'. (2.101) 

Remark (ii). If the elements gj of the decoupling set {gj}"^^ form a group, equation (j2.99[) simplifies 
to ^ 

a2RD(T) = 2T(r-A0^ (itr(i7oi?,))'Ai2 + 0(A6). (2.102) 

While the average NRD fidelity does not depend on the length of the decoupling scheme, equation (|2.99p 
in connection with the lower bound in (|2.10ip leads to the conclusion that its variance actually becomes 
smaller, the greater the length of the decoupling scheme. We expect the variance to become minimal if 
the underlying decoupling scheme is an annihilator. This feature is in strong contrast to PDD and SDD 
where smaller decoupling schemes increase the performance. 

Embedded Decoupling (EMD) 

In order to combine the advantages of the PDD and the N RD stra tegy, the following embedded dynamical 



decoupling strategy has been devised by the author in [KA05|- Let U{tc) denote the time evolution 
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operator of a single PDD cycle in the toggled frame (compare with (|2.74p ). 

U{tc) = exp(-i^„^_i At) . . . exp{-iHiAt) exp{-iHoAt) = exp^-iHtc). (2.103) 

By definition of the decoupling scheme, the zeroth order term in H vanishes and we have the residual 
Hamiltonian H = H^'^^ + Tl^'^^ + . . . , with Tl^'^^ given by (j2.78p . Let us now take a second decoupling 
scheme {7j}jlQ^ eliminating the residual Hamiltonian. The embedded decoupling strategy is to apply 
the NRD strategy at times i ■ tc, i ^ No, using the second decouphng set to suppress the residual 
Hamiltonian of the PDD cycles. As a result, after a time T = N ■ tc, N G Nq, we obtain the following 
time evolution, 

U{T = N ■ tc) ^ ll(^j^_l)U{tchr{N-l) ■ ■ ■ ll(^i)U{tchr{l) 7^(0) t^(*c)7r(0) 

= exp(-i!ffr(7v_i)At) . . .exp(-iI7,,(i)At)exp(-i!ffr(o)At), (2.104) 

where -ffr(i) = ll^i) H jr{i) for i = {0, 1, . . . , — 1}, and r(i) G {0, 1, . . . , i^c — Typically, we choose 
the second decoupling set to be an annihilator given by the set of Pauli operators, i. e. {7j}^lo^ = '^q- 
To analyze the performance of EMD, we can simply adopt the results obtained for NRD if we apply 
the substitutions Hq i— > H and At i—s- tc. In particular, to obtain the lowest order results, it suffices to 
replace Hq with ^ . Hence, we obtain the entanglement fidelity 

^EMD(j.) = 1 - i tr{{H^^^f)tcT + 0{{\Hc)HlT), (2.105) 

Fl^^^{T) = exp(-itr((i7('V)<,T), (2.106) 

the worst case fidelity 

Fl^^{T) > 1 - AkHIT + O^kHIt), (2.107) 

and the variance 

aiMD(r) = 2T{T - tc)^ ^ "gVi tr(tf t^'M \l + 0{X'% (2.108) 



I^c — l^c 

j=0 j'=0 



with Hj — "f^jH'^^^j. The fidelity decay is of order ©(A^t^T) and does indeed combine the advantage 
of the linear- in-time decay of NRD with the stronger suppression of PDD. As it was discussed in the 
PDD paragraph, the performance of PDD depends slightly on the order of the elements in the decoupling 
scheme, or in other words, on the path which traverses the elements during a cycle. To eliminate this 
dependence and to achieve an average performance, we might choose a random path for each basic 
cycle (compare with the RPD strategy). We label such an embedded strategy involving the additional 
path randomization EM Dr. An overview over the dependencies of the average fidelity decay for different 
control strategies can be found in table 12.1"! 

Embedded Symmetric Decoupling (ESDD) 

The embedded decoupling strategy described in the prece eding p aragraph can naturally be extended to 



an underlying SDD scheme, as it was done implicitly in |KA06l | (see chapter U). We call the resulting 
decoupling strategy embedded symmetric dynamical decoupling. For a single SDD cycle, equation 
(|2.103|) becomes 

U{tc) = exp{~iHoAt) exp{~iHiAt) . . . exp(-i#„^_iAt)x 

exp(-iif„^_iAt) . . . exp(-iffiAi) exp(-iffoAt) = exp(-ifft^), (2.109) 
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strategy 


decay 


none 




NRD 


0{X^AtT) 


PDD 


0{\HlT^) 


EMD,EMDr,RPD 


0{\HlT) 


SDD 




ESDD,ESDDr,SRPD 


0{\HlT) 



Table 2.1: The average fidelity decay of various control strategies using an underlying decoupling scheme of 
length ric and a pulse distance in time At (tc = ricAt) to suppress the system Hamiltonian \Ho- Note that the 
strength of the decay of NRD does not depend on the length ric. 



with t[. = At and n[. — 27ic, and the Magnus expansion of the residual Hamiltonian H contains only 

(2) (4) (2) 

terms of second and higher order, i.e. H = H + H +..., with H given by (j2.83p . As it was done 

in the analysis of the performance of EMD, we can simply adopt the results obtained for NRD if we 

apply the substitutions Hq i-^ H and At 1-^ t'^ in the corresponding expressions. To obtain the lowest 

(2) 

order results, it suffices to replace Hq with H , and we obtain the average fidelity 

^ESDD(j.) = 1-1 tr((i7^'y )t^T + 0{{Xh'^)H'^T), (2.110) 
f!%°^{T) = exp(-itr((ir(^V)t^r), (2.111) 

the worst case fidelity 

F^^°°{T) > 1 - AK'^tfT + 0{K^tfT), (2.112) 

and the variance 

'^IsDoiT) = 2T{T ~ t^)l 'g' 1 '£'(1 tr(tf t^'^))'tf + 0{\'% (2.113) 

j=0 j'=0 

As in the EMD case, we might bring the decoupling elements after each cycle into a new random 
order. We label such a strategy involving this additional randomization by ESDDr (to be compared 
with SRPD). 



Random Path Decoupling (RPD) 

Another approach to combine the advantages of the determi nistic a nd randomized strategies is called 



ra ndom path de coupling. It was proposed by Viola and Knill VK05l | and explored by Santos and Viola 
m Isvoftlvsofil i. While the performance of RPD was conjectured to be comparable with EMD VS06], 



we are going to prove this conjecture. The RPD strategy is basically to apply PDD, but now each 
PDD cycle is constructed from a randomly reordered decoupling scheme. In other words, each PDD 
cycle traverses the elements of the decoupling scheme according to a random path. The time evolution 
operator of such a PDD cycle is given by 

Unite) = exp(-iif^(„^_i) At) . . . exp(-i^^(i)At) exp(-iif^(o) At) = exp{~iH^tc), (2.114) 

where tt S denotes a randomly chosen permutation of the elements of the decoupling scheme. 
The reordering obviously does not affect the zeroth order term in the Magnus expansion of i/^ = 
h''°^ + + . . . , which is still given by (|2.75p (i. e. H^^^ = for all tt), but the first order term, 

Tic — 1 

^-^=-^ E [Hni.),H^u)W (2.115) 

i>j=0 
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depends on n. 

Lemma 2.3.4. The average of ' taken over all it G S„^ vanishes, i. e. we have 

Proof. This result is a simple consequence of the fact that [Hi, Hj] = —[Hj, Hi]. □ 

According to the above lemma, we are in a situation similar to EMD, where the residual Hamiltonian 
iJ*"^"* + h''^^ + . . . of a fixed PDD cycle is eliminated on average by the additional pulses generated by 
random selection from the second decoupling scheme. While EMD achieves the suppression perfectly in 
the sense that the average taken over all toggled residual Hamiltonians vanishes, it is unclear whether 
RPD achieves annihilation of the second- and higher-order terms in the residual Hamiltonian as well. 
(It will be shown in the next paragraph that annihilation is still achieved for the second-order term.) 
Therefore, we expect RPD to perform slightly worse than EMD (or EMDr if we eliminate the influence 
of the order of the decoupling elements). In fact RPD is equivalent to EMDr, if we replace each element 
of the second decoupling scheme by the identity. Nevertheless, RPD offers the advantage that no 
second decoupling scheme is involved. Hence, all the applied pulses are of the form g^gj for some 
i,je{Q,...,nc- 1}. 



Symmetric Random Path Decoupling (SRPD) 

The RPD strategy of the preceding paragraph can be improved by symmetrizing the randomly traversed 
PDD cycles as it was done by the SDD strategy. The resulting strategy is called symmetric random 
path decoupling SV06|; |VS06[ . Using SRPD, a basic random cycle of length n'^ = 2nc is given by 



U^iQ = exp(-ii/^(o)Ai) exp(-iif^(i)Ai) . . . exp(-i#^(„^_i) At) x 

exp(-iif^(„^_i) Ai) . . . exp(-i#^(i) Ai) exp(-i^^(o) Ai) = cxp{-iH^t'J, (2.117) 

with TT e S„^, and by using lemma [^.3. 11 the lowest non- vanishing term in the Magnus expansion of Ht^ 
is given by 



1 "c— 1 

h[.^ = ^ [HttO), -f^7r(fc)]] + [[HTr(i),H^(^j)],HT,(^k)]jAt'^ X < 

^'^ i>j>k=o ' 



1/2 if i = j or j = k 
else 

(2.118) 



Lemma 2.3.5. The average of the above expression taken over all permutations tt G vanishes, i. e. 
we have 



H 



0. 



(2.119) 



T7(2) 



Proof. We start with the observation that all the terms in the sum forming H^ with i = j or j = k 
add up to zero: 



[[Htt(i), [//7r(i), -f^ir(j)]] + [[^7T(i), -ff7r(j)], -??7r(j)] 



i>j=0 



{jiT:{i)HT,(^i)H^(j-^ ~2H^(i)H^(^j)H^(i^ =0. (2.120) 
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The last identity follows if we extend the sum by the terms i ~ j and use the fact that i?^"'' — 0. Hence, 
the average over all permutations can be taken over the simpler expression 

^ $Z (^[-ff7r(i) J-ff7r(j),-ff7r(fe)]] + [[-ff7r(i),-ff7rO)],-ff^ (2.121) 

^ i>j>k=0 

and as in the proof of lemma 12.3.41 the property -ffji-Q)] = ^[-^ttQ)? -ff7r(i)] leads to the vanishing 

mean. □ 

Since it remains unclear whether SRPD eliminates the remaining higher order terms in the Magnus 
expansion as well, we expect it to perform slightly worse than an average ESDD or ESDDr, respectively. 



2.4 Example 

In the preceding section various decoupling strategies and their advantages have been discussed. We 
are now going to examine the performance of these strategies by means of numerical simulations. 
Results on the entanglement fidelity obtained numerically are compared with the corresponding formulas 
which have been derived in the preceding section. We start by presenting the model, a quantum 
register perturbed by Heisenberg couplings, in subsection 12.4.11 Then, in subsection 12.4.21 we focus 
on the variance of the naive random decoupling NRD strategy using different decoupling sets. In 
subsection l2.4.31 we compare different strategies in order to identify the best one. Finally, we conclude 
in subsection 12.4.41 with a general guideline for a good decoupling strategy. 

2.4.1 The Model 

We choose the same model Hamiltonian as in |sV06j |. i.e. we consider rt = 8 qubits with Heisenberg 
couplings arranged on a linear chain, 

n— 1 n 

Ho=Yl J''''''^[X <»X + Y(»Y + Z(»Z]^^^^^^^y (2.122) 

ki—l ^2— 

where the coupling strength between qubits ki and k2 decays cubically with their separation distance, 
i.e. j'^i''^^ — J . _ fcj]^'^. We construct a decoupling scheme {5j}"4o^ length ric = 8 for Hq by 
using the difference scheme D(8, 8,4) listed in table [X^ in a way explained in theorem 12.2.31 Another 
decoupling scheme for Hq is given by the annihilator {7j}^lo^ '•^^ length Vc = 4^* consisting of Pauli 
operators, i.e. — XZ{j) with j € 



2.4.2 The Naive Random Strategy 

We performed a numerical simulation of model (|2.122p over the time < T < 5J~^. The resulting 
entanglement fidelity without decoupling, F"°"^{T), drops down to zero after the time « 0.5J~^ and 
is shown in figure [^75al {black, solid line). It is in excellent agreement with our estimation F"°^pp{T) 
given by (|2.27p {dashed line). In addition, figure [2T5al shows the numerically obtained NRD fidelity 
^e^nuin(^) whcn using the small decoupling set {gj}^^^ of length ric — 8 with a pulse distance in 
time of At = O.OIJ"^ {blue, solid line). The index num in 

PelnmiT) indicates that the quantity 
differs from the definition of F^^^{T) in equation (|2.9ip with respect to the average over the random 
pulse realizations: The latter quantity was defined by averaging over all realizations, while ^'e^num(^) 
averaged over a random subset of simulated runs. The NRD fidelity based on the small decoupling set 
{blue, solid line) is compared with the corresponding NRD fidelity based on the annihilator {"fj}j^^ of 
length i^c — 4* {red, solid line). Both fidelities have been obtained by averaging over 1500 single runs 
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(a) Entanglement fidelity. 




(b) Entanglement fidelity and its root mean square. 

Figure 2.5: The entanglement fidelity of a quantum register with n = 8 qubits, perturbed by the Hamiltonian 
given in p.l22|) . The time interval between adjacent decoupling pulses is At = O.OIJ"^. The NRD fidelities are 
averaged over 1500 runs. 

(a) Without decoupling {solid line, black), with NRD using the set {gfjjj^o {solid line, blue), and NRD using 
the set {7j}^^Q^ {solid line, red). For both of the NRD strategies two individual runs are shown {dotted lines). 
The dashed lines indicate the estimations given by (|2.27p and (|2.97p . respectively. 

(b) In addition to the two NRD fidelities F^l°^{T) {solid lines), we indicate the intervals Fe^nSm(r) ± ctnrd (r) 
{error bars) and F^^,^{T) ± o-^^{T) {dotted lines), where o-nrd'(2^) denotes the standard deviation of the 
numerical fidelity and o"^rd(T') the corresponding estimation given by (|2.124p . 
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with independent random pulse realizations. As predicted by our short time expansion (|2.92p . both 
fidelities are identical for short times. In the region where higher orders become relevant, NRD based 
on the small decoupling set performs slightly better. Our estimation F^^pp{T) (j2.97p {dashed line) is 
in excellent agreement with the NRD fidelity using the annihilator {red, solid line). To evaluate the 
estimations F^°^^^{T) ^TWi and F^^°^{T) HTm . we need the quantity tr(ij2)/d « 21.30 J^. 

We are now going to study the variance of the NRD fidelities. In figure [2T5bl we indicate the value 
of the quantity cr^R|^™(T), which is defined as in (j2.100p with the average over all random realizations 
(denoted by E) being replaced by the average over the subset of simulated random realizations, by 
plotting -Fe^nun,(T) ± ctmr^IT) {error bars) in addition to F^f°^^^{T) {solid line). As in figure [13al 
the plots corresponding to the NRD strategy based on the small decoupling set are depicted in blue, 
while plots corresponding to the NRD strategy based on the annihilator are depicted in red. It can be 
seen that the variance is smaller with the annihilator as the underlying decoupling set. A short time 
estimation for the variance cr^pQ(T) was calculated in equation (j2.99p . Evaluating this expression for 
the two different decoupling sets leads to 

a'^^oiT)^2T'At'xf^^-^^-^l >for {g,}J „ 
\2i.OOj4 ,for{7j}|^-i 

As it turns out, this expression overestimates the variance for longer times. Hence, we propose the 
following estimation, 

^nrT(^) = 2T{T - At)Ej]Kj, (^^ti{HjHj,)y At^ x exp(-2^ti{H^) AtT^ (2.124) 

which we expect to deliver a good approximation for all relevant times. Here, {Eji ) denotes the 
average taken over all elements of the underlying decoupling set, i.e. Hj — g^^Hogj for the small set 
{.9j}j=o^ of length Uc = 8 and Hj = jjHojj for the annihilator {7j}^l^^ of length i/c = 4^. Note that 
for short times the exponential can be neglected and this estimation is identical to the (exact) short 
time expression (I^TMj) . We put (|2.124p to the test by plotting the quantities -Fe^J'iu,„(r) ± cr^^^{T) for 
both NRD cases {dotted lines in figure [275b|) . As expected, the estimation (j2.124p is excellent for short 
times. For longer times it remains excellent when using the annihilator, but slightly overestimates the 
variance when the small decoupling set is involved. 

A decoupling strategy like NRD will be of interest only as long as the resulting fidelity is reasonably 
high. In this range, it doesn't make any difference from what kind of decoupling set the elements for 
NRD are chosen: all choices lead essentially to the same performance. But since one is interested in a 
reliable result, one might prefer an annihilator like the set of Pauli operators to constitute the underlying 
decoupling set, because of the smaller variance. 

2.4.3 Comparison of Strategies 

We are now going to compare the long-time performance of different decoupling strategies. For this 
purpose we simulated the time evolution of model (|2.122p up to the time T — 100 J"^. All decoupling 
strategies apply their pulses at times ti = i ■ At, i G {0, 1, . . . , 2000}, with At = 0.05J^^. Each 
of the entanglement fidelities of the randomized strategies is averaged over 100 individual runs with 
independent random selections. 

For this setting, a simulation of v arious decoupling strategies up to the time T = 50J~^ has already 
been done by Santos and Viola in [svoel ] ( even though for a slightly different underlying decoupling 



scheme). We extend this research by taking a closer look on the influence of the traversing path of 
the decoupling elements and by comparing the obtained fidelities with their corresponding estimations, 
which have been obtained in section [2. 31 In addition, we study the variance of the randomized schemes 
an d anal yze the performance of the EMDr and ESDDr strategies, which have not been considered 
in [SVOet . 
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PDDj traversing path tr((gfY)/d tr{{Hf^f)/d 

PDDi 50,52,54,57,51,53, <?5, 56 0.09252 16.2032 J^At^ 

PDD2 go, 91, 92, 93, 94,95,96, 97 5.5994 J^AiS 389.5980 J^Ai^ 

PDD3 50,51,56,55,52,53,54,57 36.963 JW 1971.425 J^Ai* 

Table 2.2: The trace of the squared first- and second-order terms of the residual Hamiltonian of a PDD cycle 
as a function of the order of the decoupling elements. From top to bottom: optimal order (i. e. the order which 
minimizes tr((J/'^^)^)/d), standard order (close to average performance), and worst order. 

Influence of the Traversing Path 

Let us start with an examination of the performance of the fundamental decouphng strategy (PDD) 
based on the decouphng scheme {5j}"^o^ constructed using the difference scheme 15(8,8,4) hsted in 
table E2J As it was discussed in the PDD paragraph in subsection 12.3.11 the resulting fidehty decay 
is mainly due to the first order term in the Magnus expansion of a single decoupling cycle of length 
tc = ric^t, and we proposed the estimate (|2.77p 

Fr^p°p(T) =exp(-itr((ir(^V)T^). (2.125) 

Since, with exception of the vanishing zeroth-order term, all orders in the Magnus expansion depend on 
the order of the elements in the decoupling scheme, the performance of PDD may be optimized by finding 
the permutation tt g which minimizes tr((_ff^ ) ), or in other words by finding an optimal traversing 
path for the elements of the decoupling scheme. We calculated the latter quantity for all permutations 
and found that it lies in the range 0.09252 J'^At^ < tr((I7|;^y )/d < 36.963J^At2. Permutations 
corresponding to these extremal values are shown in table [221 We label the PDD strategy based on 
the optimal path as PDDi, the one corresponding to the standard path as PDD2, and the worst one as 
PDD3. The resulting fidelities F^^^'{T), i e {1,2,3}, are compared in figure I^TBal (blue, solid lines). 
As it is to be expected from the estimation F^^°p{T), we have F^'^^^iT) > F^°°^{T) > F^°°^T). In 
figure [^TBal we also depicted the improved estimations 

Fr^^^iT) = exp(-i(tr((i7« + i/f V))t2) 

= exp(-i(tr((i?fV) -Ktr((i?fV))T2), (2.126) 

with the first and second-order Magnus term of the i-th path given in table 12.21 as dashed lines. It can 
be seen that they are quite close to the actual curves Fg^^°'(r). 

The better deterministic control strategy is SDD which achieves a vanishing first-order Magnus term 
by doubling the length of a single decoupling cycle. Hence, the expected fidelities of the three traversing 
paths are given by (|2.85p . 

F!l°^iT) = exp(-itr((i?fV)T^). (2.127) 

They are shown in figure [^.6al as dashed-dotted lines, and are in good agreement with the actual SDD 
fidelities Fg (T) {red, solid lines). In principle -Ff app(^) is not necessarily the best SDD fidelity since 

we minimized the quantity tr((_ff^ ) ) which is now vanishing. Hence, in order to obtain the optimal 

^2^ 2 

SDD fidelity we should search for the permutation tt which minimizes tr((i7^ ) ). Although we did 
not perform this search (due to computational limitations), we expect the optimal SDD fidelity to be 
quite close to Ff^^^{T). 

The last remaining deterministic strategy we are going to consider is CDD. It turns out that for the 
model and decoupling scheme under consideration, CDD leads to the same fidelity as PCDD2 repeating 
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(a) Entanglement fidelity of PDD and SDD for three different permutations of the decoupling scheme. 




10 20 30 40 50 60 70 80 90 100 



JT 

(b) Entanglement fidelity of various deterministic and randomized strategies. The upper part shows an enlarged 
representation of the high fidelity range [0.975, 1]. 

Figure 2.6: The entanglement fidelity of a quantum register with n — 8 qubits, perturbed by the Hamiltonian 
given in (I2.122|l . The time interval between adjacent decoupling pulses is At = 0.05J~^. All randomized 
fidelities are averaged over 100 individual runs. 

(a) Without decoupling {solid line, black), with PDD using the decoupling set {yjjj^g for three different 
traversing paths {blue, solid lines), the corresponding estimations {dashed lines), the corresponding SDD fidelities 
{red, solid lines) and their estimations {dashed- dotted lines). 

(b) Strategies using the standard path (labeled as 2); PDD2 {blue), SDD2 {red), CDD2 {purple) EMD2 {blue), 
ESDD2 {red), and EPCDD22 {purple). Fully randomized strategies: NRD {gray), RPD {orange), EMDr {green), 
SRPD {orange), and ESDDr {green). The upper part shows strategies using the optimal path (labeled as 1): 
PDDi {blue), SDDi {red), CDDi {purple) EMDi {blue), ESDDi {red), and EPCDD2i {purple). In addition the 
estimations (|2.128|l and (|2.129p for EMDi and ESDDi are shown {dashed lines). The standard deviation of the 
randomized strategies is indicated by error bars. 
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a PCDD2 cycle of length n^At. This is a result of the fact that the residual Hamiltonian of such a cycle 
cannot be eliminated by the decoupling scheme which was designed to eliminate the system Hamiltonian 
Hq. Again, the fidelity depends on the traversing path of the underlying PDD cycle. We show CDD^ for 
the optimal PDD path {i = 1) and the standard path {i = 2) in figure [2T6b] (purple). It can be seen that 
the CDDi fidelity surpasses the SDDj fidelity. Since, for the model under consideration, the performance 
of CDD; is equal to the performance of PCDD2i, this means that periodic dynamical decoupling using 
a single PCDD2i cycle of length nlAt is superior than periodic dynamical decouphng based on a SDD^ 
cycle of length 2ncAt. Hence, according to the estimating formulas for periodic decoupling strategies, 
the trace of the square of the residual Hamiltonian of a PCDD2i cycle has to be smaller than the one 
of a SDDi cycle. 

The randomized strategies which depend on the traversing path are EMD and ESDD, for which the 
estimations (|2.106p and (j2.11ip have been proposed: 

^™p°^(T) = exp(-i(tr((i?!^V) +tr((i?f y))r. n.At) (2.128) 



e app / v^^v^ y ^ 

f!%^-{T) = exp(-itr((i?fV)r. 2n,At). (2.129) 

The improvement over PDD and SDD is the conversion of the quadratic decay into a linear- in-time 
one. We show the fidelities F™°^(T) (blue) and F^^°^^(T) {red) for i = 1,2 in the lower and upper 
part of l2.6b[ respectively. The corresponding approximations -F|f app (^) ^^'^ app' (^) ^-Iso shown 
{dashed lines). Analogous to ESDD, we might as well embed the PCDD2i cycles into a naive random 
decoupling scheme based on an annihilator. We label the resulting strategy EPCDD2 for embedded 
periodic concatenated second level dynamical decoupling. In figure I2.6b[ ^"e^ nunP^' (^) depicted for 
i = 1,2 {purple). As to be expected from the result that the PCDD2,; fidelity surpasses the SDD^ 
fidelity, EPCDD2i is superior to ESDD^. In fact, the best decoupling strategy we found for our model 
is EPCDD2 i for t he optimized traversing path. It has to be compared with the best previously known 



strategy in [SV06|, which was SRPD (SRPD will be discussed in the next paragraph) and which achieves 
a fidelity of « 0.8 at T = 100J~^, while EPCDD2i manages to sustain the fidelity nearly perfectly. The 
standard deviation of the fidelity of each randomized decoupling strategy is indicated in figure I2.6bl by 
error bars. 



Fully Randomized Strategies 

Randomized decoupling strategies which do not involve a fixed traversing path through the elements 
of the decoupling set are NRD, RPD, and EMDr as well as their symmetrized counterparts SRPD and 
ESDDr. We refer to these strategies as being fully randomized. The NRD fidelity based on the set of 
Pauli operators performs quite poor, as it can be seen from the gray curve in figure [2!6bl This fact can 
be understood by looking at the estimation given by (|2.97p . 

^^e^app^ = exp(-itr(i72)TAt). (2.130) 

Even though the fidelity decay is linear in time, the value of tr(i7Q) /d~ 21.30J^ is huge compared to the 
worst (i.e. largest) first-order term tr((S'3^^)^) « 36.963J''At2 = 0.09247^ relevant for PDD. A higher 
suppression of Hq is obtained by using the random path decoupling (RPD) strategy, which chooses 
the traversing path through {g^jJ^Q for each successively applied PDD cycle of length UcAt = 8At at 
random. While the EMD fidelity depends on the particular choice of a fixed path, RPD delivers an 
average EMD fidelity, i.e. we propose that a good approximation is given by 

^^rap"p(r) = exp(-iE.(tr((Hi^V)+tr((i?f)^))T.n,Ai), (2.131) 
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where E^r denotes the average over all permutations tt e S„^. The numerically obtained fidelity 
FennmiT) is depicted in figure [2Jbl in orange. The symmetrized counterpart of RPD is SRPD and 
makes use of random SDD cycles of length 2ncAt. As a result, SRPD removes the first-order Magnus 
terms and leads to the improved fidelity 

Ff/p^(r) =exp(-iE.tr((i7f )>.2n,At). (2.132) 

-Pf m,m(r) is also shown in figure in orange. From RPD and SRPD we obtain the strategies 
EMDr and ESDDr by plugging in additional pulses in between subsequent PDD or SDD cycles, where 
these additional pulses are constructed by random selection from a second decoupling set (typically an 
annihilator given by the set of Pauli operators). Since the average over the residual Hamiltonian of 
the underlying cycles vanishes for the random path strategies even if we do not apply this additional 
embedding^, we expect the resulting fidelity to be effectively identical with the one of RPD and SRPD. 
This fact is confirmed by the data shown in figure [2T6bl although a bit surprisingly the EMDr and ESDDr 
fidelities appear to be slightly worse. Nevertheless, the EMDr and ESDDr fidelities shown in figure [2T6bl 
(green) indicate an advantage: The square root of the variance indicated by the length of the error bars 
is approximately only half the size as the corresponding quantity for RPD and SRPD. This feature might 
be important in practice, since it is a priori unknown whether a particular single run of a randomized 
strategy delivers a fidelity above or below average. 

2.4.4 Conclusions 

The general guideline for the construction of a good decoupling strategy for a system Hamiltonian Hq 
turned out to be the following: 

• We start by looking for a deterministic strategy, for which the average Hamiltonian H — ij'"*''' + 
i?''^'' + ij''^'' + . . . of a basic decoupling cycle gets as small as possible. Such a strategy is usually 
based on a decoupling scheme of length Uc for Hq, which satisfies the decoupling condition i?'"' = 
0. In order to minimize the residual Hamiltonian, the length Hc should be as small as possible 
(smce we have iJ^'^ = OiiHoY+^incAty)). The standard trick to improve a given decoupling 
scheme is to make it symmetric in time. Even though the length of such a symmetrized scheme 
is twice the length of the basic decoupling scheme, this leads to a vanishing first-order term H^^\ 
In addition we saw that the residual Hamiltonian depends on the order of the elements of the 
decoupling scheme. By finding an optimal order, the remaining quantity (or for i/*" ■* = 

(2) 

the quantity H ) can be minimized. For our example, the basic decoupling scheme was based 
on a difference scheme of length Uc = S and the best deterministic decoupling strategy we found 
was the PCDD2 cycle of length for an order of the decoupling elements which minimized the 
quantity tr((i/ ) ) . 

• The second step is to suppress the residual Hamiltonian. In principle we could use the same 
guideline that was used in the first step for the suppression of Hq, but because of the complicated 
structure of the typically highly correlated residual Hamiltonian, a small decoupling scheme usually 
does not exist. Instead we have to use an annihilator like the set of Pauli operators. Because of 
the large length of this second decoupling scheme (which is equal to the square of the dimension 
of the system Hilbert space), now the method of choice is naive random decoupling. Hence, we 
end up with an embedded decoupling scheme. For our example, the best result was obtained for 
EPCDD2, while the second best result was obtained for ESDD (in both cases for an optimal order 
of the decoupling elements). 

•I-This might not be true for terms of third and higher order in the Magnus expansion of a basic cycle. 
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While it might be hard to find a deterministic strategy which surpasses SDD for a given decouphng 
scheme, the SDD strategy can always be applied. If we are not able to determine a good order of the 
decoupling elements, we might ensure at least an average performance by using the symmetric random 
path strategy (SRPD) instead of embedding the SDD strategy. The variance of SRPD can then be 
minimized by an additional embedding of the basic SRPD cycles in a naive random decoupling strategy 
based on an annihilator (leading to ESDDr). In addition, SRPD is the method of choice if we cannot 
afford the second decoupling scheme, i. e. if we are restricted to apply only pulses of the form .g^g], with 
Qi being an element of the basic decoupling scheme {gj}^^^ for Hq. 

Let us close this chapter by giving a small outlook. According to the results presented in the last 
subsection, NRD alone seems to be a rather poor choice for decoupling. Nevertheless it holds many 
useful features: For example, it can be applied even if the system Hamiltonian is time dependent. Even 
more important, in chapter [3] NRD turns out to be applicable even if the decoupling pulses have to 
be implemented using bounded controls, and in addition, it turns out to be able to stabilize quantum 
computations. 

So far only the control task of decoupling has been considered. We expect similar results for the task 
of simulating a non-vanishing Hamiltonian. For example, the potential of ESDD for the simulation of a 
two qubit gate Hamiltonian in the context of a selective decoupling scheme will be explored in chapterjH 

The assumption that the decoupling pulses can be applied in a perfect manner is a strong idealization. 
In practice, each pulse will be non-ideal and we have to distinguish between systematic and random 
pulse errors. An important question is how such errors affect the performance of a given decoupling 
strategy. First results co ncerni ng this question have been obtained by Santos in Viola with the help 
of numerical simulations [SV08| . In addition, the question arises whether decoupling sequences might 
be designed that are stable against pulse imperfections. For instance, an Eulerian decoupling cycle (as 
discussed in subsection l2.1.7p projects any systematic errors of the decoupling pulses (which are elements 
of the group algebra A — R{'CG)) int o the c ommutant A' and an additional subsystem encoding might 



protect against these residual errors VK03 | 



Remark. The latter fact can be seen by looking at equation (|2.5ip in which the effect of systematic 
pulse errors is reflected by replacing the left Hq by Hq + iJ°''''(i') where Hj"{t') specifies the error of 
the pulse 



pT = PTi^p) ^ ^exp(-z {H,{t') + H]"{t'))dt') , 
while the corresponding ideal pulse is given by 

Pj = Pji-Tp) = T exp(-i ^ " Hj{t')dt'^ . 
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3 Decoupling and Computation 



In chapter [2] we studied dynamical decoupling methods which were designed to suppress the influence 
of imperfections in a quantum memory. A more demanding goal is to use these methods to protect 
a running quantum computation, which consists of a sequence of one- and two-qudit quantum gates. 
While we assumed in chapter [2] that the decoupling pulses are applied quasi-instantaneously using 
a strong local control Hamiltonian (with the exception of subsection 12.1.7]) . we are going to assume 
that the experimentally more demanding quantum gates (especially the two-qudit quantum gates) are 
realized by applying a weak gate Hamiltonian over a finite time interval Tg larger than the time interval 
At in between subsequent decoupling pulses. As a consequence, in general, the applied decoupling 
scheme also alter s the gat e Hamiltonians. Solutions for this fundamental problem have been discussed 



by Viola et al. in VLK99[. In particular, by using a subsystem encoding it becomes possible to achieve 



universal control via a set of gate Hamiltonians which commute with the decoupling pulses, and he nce 



remain unaffected. For example, the hybrid decoupling and computing scheme analyzed in [KLOSj by 
Khodjasteh and Lidar is based on the above approach. Even more general, we might assume that the 
decoupling pulses are realized over a finite time interval as well. In this case the dynamically corrected 
gates b ased on an Eulerian decoupling cycle (Euler-DCGs) proposed recently by Khodjasteh and Viola 
are able to achieve simultaneous computation and decoupling: An Euler-D CG is generated by 
extending an Eulerian path in the Cayley graph of the Eulerian decoupling strategy VK03| described in 



subsection 12 .1.71 by applying a corresponding gate Hamiltonian after completing the path. In addition, 
in order to get a vanishing lowest order average Hamiltonian, a gate leading to the same error as the gate 
Hamiltonian, but implementing the identity, is applied after visiting each of the non-identity vertices in 
the Cayley graph for the last time. 

In this chapter we consider the most general setting, i. e. we consider decoupling pulses which are gen- 
erated by applying a local control Hamiltonian for a time Tp and quantum gates which are generated by 
applying a two-qudit gate Hamiltonian for a time Tg. We are going to show that a quantum computation 
can be stabilized against static imperfections by executing the quantum gates in bet ween su bsequent 
decoupling pulses. This is in contrast with the Euler-DCGs of Khodjasteh and Viola KVO^, where a 



quantum gate is effectively implemented only in between completed cycles. Thereby, our decoupling 
pulses are constructed by random selection from an annihilator as the set of Pauli operators, or in other 
words by using the naive rand om decou pling (NRD) strategy presented in the preceding chapter. Our 
method has been published in |kaso4 where we devised the acronym Pauli random error correction 



(PAREC), and provided numerical evidence of its error suppressing properties. We derive a formula 
for the fidelity decay of a stabilized quan tum comp utation (for the special case of instantaneous gates 



and pulses we derived such a formula in [GKAJOg). A numerical simulation of the PAREC method is 



performed for the quantum computation of a quantum map running on a quantum computer pe rturbed 



by Heisenberg couplings. The PAREC method is compared with an idea of Prosen and Znidaric [PZOlj . 
who proposed to stabilize a quantum computation against static imperfections by increasing the decay 
of the correlation function measuring the fidelity decay. It turns out that our approach does exactly 
that, i. e. it leads to an ultim ate decay of correlations. Eventually, we consider the Euler-DCGs of 



Khodjasteh and Viola [KV09|. By implementing each quantum gate as an Euler-DCG, a determinis- 
tic decoupling method for quantum computations is obtained. We propose to implement the PAREC 
method by using only Euler-DCGs in order to benefit from the advantages of both methods. 
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Another scenario in which the decoupHng strategies of the preceding chapter may be used to improve 
the performance of a quantum computation is given if the quantum gates are implemented using a 
selective decoupling scheme. It will be dealt with in chapter [4] 

We start by presenting an overview of known results on the fundamental problem of combining 
quantum computation and dynamical decoupling in section 13.11 The PAREC method based on the 
randomized decoupling strategy is presented, analyzed and simul ated in section [321 In section [5T51 we 
compare the PAREC method with the idea of Prosen and Znidaric [PZOlj . who propos ed to in crease the 
correlation decay. Eventually, we present the Euler-DCGs of Khodjasteh and Viola KV09l | in section 
13.41 and show how they might be combined with the PAREC method. 



3.1 Decoupling and Quantum Logic 

Let us consider a quantum register S defined on a rf-dimensional Hilbert space Tis- Typically the register 
consists of n qudits of dimension q such that d — q"". For the sake of simplicity, we assume 5 to be a 
closed system perturbed by static imperfections modeled by the system Hamiltonian Hq acting on Tis- 
(It is straightforward to extend any of the forthcoming results to the case where S is an open system 
coupled to an environment E via a set of coupling operators as in subsections 12.1.51 and I2.1.6P . In this 
section we assume that the decoupling pulses are applied quasi-instantaneously by using a strong local 
control Hamiltonian, or in other words , by using bang-bang control, but all results are also applicable 



if the Euler decoupling method ( VK03[, subsection l2.1.7p for bounded strength control is applied. The 
fundamental control strategy, called periodic dynamic decoupling (PDD, subsection 12.3. ip . repeats a 
basic control cycle traversing all the elements of a control scheme Q = {(7j}"^o^ over and over again. 
The length tc — ncAt of such a basic cycle is determined by the number n-c of elements in the control 
scheme and by the time At in between subsequent pulses. Let us assume now, that we would like to 
generate a certain two-qudit quantum gate by applying a possibly time-dependent gate Hamiltonian 
Hg{t) for a time Tg = m-tc, m E N. Then, the total Hamiltonian is given by the sum of the Hamiltonians 
describing the static imperfections (Hq), the quantum gate {Hg{t)), and the decoupling pulses {Hc{t)), 

H{t)=Ha + Hgit) + H,{t), (3.1) 

for t S [0,T£,]. As in section [TTl we switch to the toggled frame U{t) ~ Ul{t) ■ U{t). As a result of the 
control, we obtain (in lowest order AHT) the effective total Hamiltonian 

H^"^ =ng{Ho)+Ilc;{Hg), (3.2) 

where we assumed for simplicity that the gate Hamiltonian remains constant over the time interval Tg, 
and where we used the definition 

ric — 1 

IlgiX)^-Y,9]Xg,, (3.3) 



for any operator X acting on Tis- Hence, any gate Hamiltonian gets altered by the applied decoupling 
scheme. In particular, a time- independent gate Hamiltonian Hg becomes Hg(iJg). We are now going 
to discuss solutions to this problem. For the remaining section, let us assume that the elements of 
the control scheme Q — {(?j}"^Q^ are defined by a unitary projective representation i? of a group 
G = {SjYjl^^ acting on the system Hilbert space Hs, i- e. we assume that gj — R{gj)- We will call G 
the underlying index group. Assuming that the elements in Q generate a larger but finite group G, we 
consider the ordinary irreducible representations of G. As in subsections 12.1.6 1 and 12 . 1 ."71 we denote the 
corresponding group algebra R{CG) by A and its commutant by A'. 
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3.1.1 Universal Computation on a Subsystem 

As discussed in subsection l2.1.6l the Hilbert space of the quantum register decomposes with respect to 
the irreps J oi Q, 

Ws = 0H. = 0C.®I?., (3.4) 

where = Ami{Cy) denotes the degeneracy and di, — dim(I?^) denotes the dimension of the irrep 
V ^ J. Since, for any operator X acting on Tis, nc;(X) commutes with all the group elements, it 
follows that IIg {X) is in . Hence, the subsystems \T)y]y^j are dynamically generated noiseless 
subsystems f jZanOOl : IvKLOot . subsection l2.1.6p . In order to generate a universal set of gates acting on 



subsystem I?^, we have to apply gate Hamiltonians which belong to the group algebra A. Unfortunately, 
according to equation (|3.2p . this is impracticable since such a Hamiltonian gets projected onto A! . A 
very elegant solution appears for the case that ng(iJo) ^ Al ^ A — j Ai,X^, with A;^ € C and X^j 
denoting the identity acting on 7i^: In this case we might use one of the subsystems {C^},y^j as a 
noiseless subsystem and generate the corresponding quantum gates using a gate Hamiltonian belo nging 
to A' ■ Any Hamiltonian belonging to A' remains unaffected by the action of Hg ZanOd : VKLO0l |. The 



method becomes infeasible if Q acts irreducible on Hs- Then, the set J" contains only one element v 
with d,y = dim(7i5) and = 1. 

In the above scenario, universal control is achieved via a set of gate Hamiltonians which commute 
with the decoupling pulses, an d henc e remain unaffected. For instance, the hybrid decoupling and 



computing scheme analyzed in KL08l | by Khodjasteh and Lidar is based on the assumption that the 



computational operations commute with the decoupling pulses. 
3.1.2 Universal Computation using Multiple Decoupling Schemes 

By using a decoupling scheme Q = {gj}"^^ defined by a unitary projective representation R, any 
time-independent gate Hamiltonian Hg gets projected onto the commutant A' of the group algebra A 
via Ilg{Hg) (compare with (|3.2p ). Hence, the only applicable gate Hamiltonians are those which belong 
to A'. If an additional decoupling group Q — {gj}"^^, with group algebra A and commutant A', is 
available, it becomes also possible to apply any gate Ha miltonian belonging to A' . Let A G A' and 
let B G A' ■ It was recognized by Viola etal. in that by applying A and B interchangeably. 



jate Ug — could be created, where L belongs to the Lie algebra generated by iA and iB under 
commutation. Additional decoupling groups Q might be generated by employing the following trick: We 
apply the additional bang-bang pulses P and at the beginning and the end of a single C/-decoupling 
cycle, respectively. As a result, the time evolution of a single PDD cycle is changed from 

U{tc) = exp{-igl^_^iHo + Hg)gn^^iAt). . .exp{~igl{Ho + Hg)giAt)exp{~igl{Ho + Hg)goAt) (3.5) 

(compare with ((274)) 1 to P^U{tc)P, and lowest order AHT leads to Hg ^ Ug{P^HgP) G A' with g = 
P^QP. The decoupling of Hq ^ Hg(7?o) = A • I (with A e R) remains unaffected since Hg^P^ HqP) = 
ptng(ffo)-P = P^XIP ^\-X. Note that for A! ^ A!, P must not be in A. If, in addition to Q, a large 
enough s et of ban g-bang pulses P ^ A\s available, it might become feasible to construct a universal set 



of gates VLK99|. Again, the method becomes infeasible if Q acts irreducible on Ti^: Then, A! ~ AX, 



with A G C, generates only a trivial action. 



3.1.3 Gates via Fast Switching 



In the previous two subsections we assumed that a gate Hamiltonian Bg was switched on over a period 
corresponding to an integer number of decoupling cycles, each of which is of length — ■ At. As 
a consequence, in lowest order AHT, Bg became projected onto Hg(i/g). Let us now assume that we 
are able to switch Bg on and off for shorter periods At, a scenario which is called 'weak strength/fast 
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Figure 3.1: Schematic representation of a PDD cycle, which tries to implement a quantum gate Ug = 
Texp(— i J^" Hg{t')dt'^ with Tg = At by switching on the gate Hamiltonian Hg during the period where the 



control visits the identity element go of the control scheme {gj}" 



j^O 



switching' in If Hg is switched on only during the interval At corresponding to the identity 

element go G G, lowest order AHT leads to 



(3.6) 



Now any quantum gate Ug = exp{—iHg ■ mtc) with m € N could be generated by repeating such a cycle 
an integer number of times. If we are also able to switch on the Hamiltonians gjHgg^j during th e j-th 
part of the cycle (for j = 1, . . . ,nc — I), the factor 1/\G\ in the above equation vanishes VLK99|. Note 
that this method works even if the control scheme G is not related to an underlying index group. 



3.1.4 Dynamically Corrected Gates 

In this subsection we present an idea due to Khodjasteh and Viola KV09j |. who proposed to combi 



Topc 

decoupling and computation by constructing dynamically corrected gates (DCGsjj. We consider a 
decoupling scheme G ~ {5i}j=o ^ of length tIc, where go = I denotes the identity element. The basic PDD 
cycle of length tc = ric ■ At is constructed by traversing the elements of the decoupling scheme in the order 
5i) 92, ■ • ■ , Srie-i, ffo, i- e. we close the cycle by visiting the identity element. If the gates implementing 
a quantum computation could be generated instantaneously, they could simply be executed in between 
subsequent cycles without introducing any errors. Instead, we assume that a quantum gate Ug has to be 
generated by switching on a time-dependent gate Hamiltonian Hg(t) for a time Tg = At: Ug = Ug{Tg) 
with Ug{t) = Texp(— i Hg{t')dt'^ for t £ [0, r^]. In order to combine a decoupling cycle with the 
generation of a quantum gate Ug , we apply the corresponding gate Hamiltonian during the last part of 
the cycle, in which the control visits the identity element. A schematic representation is given in figure 
13.11 As a consequence, the time evolution of such a cycle is given by 



me 



U{tc) = C/g-rexp(-i^ Ulit')HoUgit')dt'ye^p{-igl^_,Hogn^-iAt)...exp{-iglHogiAt), (3.7) 
and in lowest order AHT the average Hamiltonian of such a cycle is given by 

1 / j-At Ua-l X 

H -^^[glj^ Ul{t')HoUg{t')dt'go+J2g]Hog,Aty (3-8) 

Because of the lowest order gate error we do not obtain the usual result i/^""* = Ilg{Ho)- The idea 
of Khodjasteh and Viola [KV09i] is now to produce the same error during all the non-identity steps of 



'In [KV09|| the idea of dynamically corrected gates was presented in the context of Eulerian decoupling using bounded 
controls; here we consider the simpler case of instantaneous decoupling pulses. 
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the decoupling cycle. As a result, the lowest order average Hamiltonian of such a cycle would be given 

by 

^ ^ ^ E 9]%9j = He Ul{t')H,U,{f)dt') . (3.9) 

The above expression leads to a trivial time evolution, if we demand a decoupling scheme which satisfies 
Wg (<f>g) = A • X, with A G C (this point will be further discussed in subsection 13.4.11 deahng with Euler- 
DCGs). 

We clos e this s ubsection by showing how these additional errors could be generated. Khodjasteh 
and Viola [KVOflt proposed the following trick: Let us assume that the quantum gate Ug = Ug{Tg) — 



exp{—iHgTg) is generated using a fixed gate Hamiltonian Hg whose strength is modulated by a time- 
dependent pulse shape f{t) such that f{t')dt' = 1: 

Ug{t) = e-^Y>(-lHgTg ■ - ^ f{t'/Tg)dt') . (3.10) 



Assuming that /(t) = for t ^ [0,1] we could generate an identity gate X = Uiijg) by using the 
following pulse shape: 

Ui{t) = expf-iiJ^Tg • - / {f{2t'lTg) - f{2 - 2t'/Tg))dA . (3.11) 

^ Tg Jo ' 

Calculating the lowest order error $/ of such an identity gate, 

(•At 

/ uj{t')HoUiit')dt', (3.12) 







is straightforward and shows that indeed $/ = <i>g. Hence, in order to generate the additional errors, 
we have to implement these identity gates by switching on the Hamiltonian in the exponent of (j3.1ip 
during the first — 1 steps of the decoupling cycle. 

3.2 Pauli Random Error Correction 

The methods for quantum computation in the presence of decoupling, which have been discussed in the 
preceding section, all have some drawbacks: The first two proposals, subsystem-encoding and multiple 
decoupling schemes, become infeasible if the decoupling group acts irreducible on the system Hilbert 
space. The fast-switching method demands the ability to switch a gate Hamiltonian on and off quickly, 
and in addition, weakens the interaction strength of any applied gate Hamiltonian by a factor in inverse 
proportion to the size of the decoupling set. Eventually, dynamically corrected quantum gates demand 
a decoupling set which satisfies the decoupling condition for perturbations which have been twisted by 
the gate errors p.9p . and in addition, demands the generation of additional identity-gates mirroring the 
gate errors. 

We are now going to present a method which uses naive random decoupling (NRD, subsection 12 .3 . 2( 1 
to stabilize arbitrary quantum algorithms against static imperfections (like inter-qudit couplings, for 
instance) in a rather simple way. While any method base d on d eterministic decoupling strategies, 
like for instance the method of dynamically corrected gates ( KV09t , subsection I3.1.4p , is only allowed 



to implement quantum gates in between completed decoupling cycles, random decoupling allows the 
quantum gates to be implemented in between subsequent decoupling pulses. It will be shown that, as it 
is the case for NRD in the absence of any computation, the fidelity decay caused by static imperfections 
will be slowed down to a linear-in-time one. Our me thod was proposed for the first time in the author's 
diploma thesis Ker04| and subsequently in [kaso3, where the acronym Pauli random error correction 
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Figure 3.2: Schematic representation of the PAREC method. The gate sequence of the original quantum 
algorithm Uqa = ■ ■ ■ ■ U3 ■ U2 ■ Ui is replaced by an alternating sequence of randomly chosen decoupling pulses 
of duration Tp generated by the local control Hamiltonian He(t), and twisted quantum gates g[i]UigJ^^^ 
of duration Tg generated by a gate Hamiltonian Hg{t). 



(PAREC) was devised. In these publications, all pulses and gates were assumed to be of the bang-bang 
kind, and only numerical evidence of the r esulting l inear-in-time decay was provided. We derived a 
formula for the resulting fidelity decay in GKAJO^. In this section, we consider the more general 
case of bounded controls generating finite decoupling pulses of duration Tp and finite quantum gates of 
duration Tg. 

We start with a detailed description of the PAREC method in subsection 13.2.11 To evaluate the 
stabilizing properties of PAREC, we have to compare a stabilized computation with an unprotected one. 
Before we proceed with an analysis of the fidelity decay of an unprotected quantum computation in 
subsection l3.2.31 we derive a general second order expansion of the entanglement fidelity of a perturbed 
quantum algorithm in subsection 13.2.21 The fidelity decay of a stabilized computation is analyzed in 
subsection 13.2.41 Eventually, in subsection 13.2.51 we present the results of a numerical simulation of a 
protected and an unprotected quantum algorithm, which allow us to put the derived fidelity formulas 
to the test. 



3.2.1 Implementation 

Let us consider G N iterations of a quantum algorithm given by the ideal unitary transformation 
Uqa = ■ ■ - Us ■ U2 ■ Ui, where Ui, i = 1, . . . , rig, denotes an elementary one- or two-qudit quantum 
gate. In the PAREC method before each quantum gate Ui of the r-th iteration (r = 1, ...,na) of the 
unitary transformation Uqa, a unitary of the form g[r,i].'7[^ is applied. Here, the unitaries 5[r,i] (with 
5[r,o] — 5[T-i,ng] ^-iid 5[i.o] = I) are drawn at random from a decoupling set G = {gj}"^^ , i.e. the 
index [t, i] is in {0, 1, . . . , ?ic ^ 1} for all r = 1, ria and alH = 1, . . . , Ug. Simultaneously the changes 
on the quantum algorithm due to these random unitary gates have to be compensated by replacing 

(r) t 

each elementary quantum gate Ui of the r-th iteration of the original algorithm by — 9[T.i]Uig^^ ^. 
The locality of the control assures that any quantum gate acting on m qudits remains an m-qudit gate: 
With g^^^i] = (g) 5[^_,]_2 «)•••«) g[T.^].n e U^" it follows that 

U^'' = g[r.r] ■ U, ■ <?f^_^] 

= {9lr.i].k^^9lr,^]M ' ' 5^ .fci ® fffr.i] ,fc J ® ^ {1 ■. ■ ■ ■ .n}\{kr M} ^ (3-13) 

for any m = 2 qudit gate Ui acting on qudits ki and k2, for instance. Furthermore, after the last 
quantum gate C/jl""^ a final unitary gate ^ j is applied. As a result each iteration of a unitary 
transformation Uqa is replaced by 2ng unitary quantum gates so that after Ua iterations one obtains 
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the result 

^QA = ^QA ■ ■ ■ Uqa ■ Uqa 

. . . « • . . . • 3[2,3]5f2,2] ■ U^'^ ■ 9l2.2]9ls] ■ Ui'^ ■ 5[2,i]fffi,„ J- (3.14) 
{U!,]^ ■■■■■ 3[i,3]5[i.2] • U^^^ ■ .9[i.2].9[i.i] ■ C^f ^ • 9[is]^^) 
- «f ■ • • . . . (1^,^; . . . V^VI^){V<^ . . . V^'WI^^) 

with = J/^^'' and V2*'^lj^ = 5[r,fc]5[7. fc_i] ^ = l,---7'T-g- A particular PAREC implementation of 
the quantum Fourier transform (QFT) is schematically represented in figure [331 for the special case of 
n — 4 qubits and Q = V2 given by the set of Pauli operators (|2.58p . Definitely, this random application 
of decoupling elements together with the associated change of elementary quantum gates does not affect 
any quantum algorithm. 

In this section, we consider the general case of bounded controls, i. e. we assume that the decoupling 
pulses Vj^fcli = K^fe-i(''p) ^re generated by switching on a local control Hamiltonian He for a time Tp, 

^2fe-^iW = '^^^^ir^ Hc{t')dt'y for t e [0,Tp], (3.15) 

and the quantum gates = V2^\Tg) are generated by switching on a gate Hamiltonian Hg for a 
time Tg, 

V^l'^ (t) =Te^p(^-i Hg {t')dt'^ , for t e [0, Tg] . (3.16) 

The situation is depicted in figure [221 where we consider a single iteration of Uqa- The time in between 
subsequent decoupling pulses is denoted as usual as At. As a consequence, the time 5t of free evolution 
in between gates and pulses is given by 5t = (Ai — Tg — Tp)/2. 

While equation (|3.14p denotes the ideal time evolution of an iterated quantum algorithm C/g^ em- 
ploying the PAREC method, the total time evolution in the presence of static imperfections described 
by a Hamiltonian Hq is given by 

Tina _ r'("»)r'("»)'\ fni^) M2)^(2)\ 

•^gA perturbed - 1*-^™, ■■■^2 '-'1 j ' ■ ■ • ' (^n^ • • ■ '-^2 )' 

{Gi']..M^i^G^^^)■Tc^p[-^£\|'^\t')HoV|'\t')dt'), (3.17) 

where we used the abbreviations 

5[T,fc]-^fc-g[.,fc] -^exp(-i ^ ' V^^,^\t')HoV^l\t')dt') ■ eM-iHoSt) ■ (3.18) 

In other words, to obtain the total time evolution, the quantum gate C/fc, k — 1, . . . ,7ig, in the r-th 
iteration of the ideal quantum algorithm Uqa is replaced by the gate 

'^k^ = 3[r,fc] exp(-i77J;)5[^^fe] • Uk ■ gf^fc] exp(-iiJ^^)g[^^fc], (3.19) 
where in lowest order AHT the average Hamiltonians i/jT; and H]l^ are given by 

Hki = r ^2k+i it')HoV^kli it')dt' + HoSt (3.20a) 



andHl^^ / V^l'>\t')HoV^^\t')dt' + HoSt, (3.20b) 
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respectively. If the decoupling pulses and the quantum gates are applied in the bang-bang limit (rp — s- 0, 
Tg — > 0), we obtain the simpler and exact expressions HJ^j = HJ..^ = HoAt/2. 

3.2.2 Expansion of the Entanglement Fidelity 

In the following we are mainly interested in the entanglement fidelity comparing a unitary operation U 
and its slightly perturbed version Us- Thus the relevant quantum operation £ involves a single unitary 
Kraus operator K which is given by K - Us. On the basis of ((2:24)) in the case of high dimensional 
quantum systems the average fidelity is approximately given by the entanglement fidelity (|2.25p 



-tr(C/tC/,) 



Fein 

which is determined by the absolute square of a fidelity amplitude 



(3.21) 



(3.22) 



In this subsection a perturbative short-time approximation of the fidelity amplitude is derived, which 
will be used at several occasions in the current and the following section. Let us consider Ua iterations 
of a quantum algorithm given by the ideal unitary transformation Uqa = ■ ■ - Us ■ U2 • Ui, i.e. we 
set C/^ = J7qJi° in (|3.22p . We make the general assumption that the ideal time evolution is perturbed, 
where the j-th quantum gate of the r-th iteration of Uqa is replaced by the perturbed unitary quantum 
gate 

Uj ^ exp(-i5ffJ;)C/j exp(-i(5ffJJ. (3.23) 

The index r in (|3.23p takes into account that perturbations may be different in successive iterations of 
the unitary transformation Uqa. 

Lemma 3.2.1. A .second order expansion of the fidelity amplitude A^ p.22p after Ua iterations of the 
perturbed quantum algorithm with respect to SHJ^ and SHJ^ is given by 

AM - 1 - E E E ^ tr(5i7Jp) + i triiSHJ^)') 

- E E E [H5H]i[mii{k)) + tv{5H],{j)5HUk - I)) 

r = l 'j=2 k=l 

+ tr(SJj;(j - l)dHli(k)) + tr{5HJ,{j - l)SHl{k - I)) 
-T.T.-MU]SHJ,U,SHJ^) 

Ua Ti-1 rig 



t,([/"-'.«j;/(j)c/'.-'>dffS(t)) 

ri=2 T2 = l j,k=l 

+ tr{U^'-^'SHjl{j)U^''^'SHl^{k - 1)) + ti{U^'-^'SHj^{j - 1)U^'-^' 
+ tr{U^^-^'SHj^{j - l)U^'-^HHll{k - I))j + 0{{5H) 



^3^ 



with the abbreviation 



SH^i) = Ulul 



. UJ ■ SHJp ■ U, 



■ U2U1 



^ rrt 



(3.24) 
(3.25) 



The terms linear in the perturbing Hamiltonians SHJ^ vanish if all Hamiltonians involved are traceless. 
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Proof. To obtain the expansion, all terms of the form exjp{—iSHJi) and exjp{—iSHJ^) are expanded as 
exp(-^(5ffJJ = X - iSHJ^ - i {6HJ^Y + ■■■■ ° 

Remark. Note that all the terms of (j3.24|) involving tr(-) terms are real valued so that up to second 
order the fidelity Fe{na) — \A(.{na)\'^ is simply obtained by multiplying all these terms of Ae(na) with 
a factor of magnitude two. 



3.2.3 Fidelity Decay of Unprotected Computations 

Before we are going to derive a formula for the entanglement fidelity of a quantum computation in 
the presence of static imperfections which is protected by the PAREC method, we have to examine the 
corresponding fidelity decay of an unprotected computation. Typically, the fundamental unitary trans- 
formation Uqa constituting a quantum algorithm can be decomposed into a sequence of rig elementary 
one- and two-qudit quantum gates, i.e. 

Uqa = C/„, U3-U2-Ui. (3.26) 

Let us assume in our subsequent discussion that the quantum algorithm under consideration involves 
Ua iterations of such a fundamental unitary tr ansform ation Uqa- Such quantum algorithms appear in 



the context of search algorithms, for example Gro97| . Furthermore, let us focus our attention on the 



case of static imperfection in which the perturbing influence on such a quantum algorithm arises from 
a fixed and time-independent Hamiltonian coupling Hq between the qudits constituting the quantum 
information processor. Without loss in generality, Hq is taken to be traceless throughout the remaining 
section. We assume that an elementary quantum gate Ug is generated by switching on a possibly 
time-dependent gate Hamiltonian Hg for a time r^, i. e. we have Ug = Ug{Tg) with 



Ug{t) = T cxp{-i Hg{t')dt') (3.27) 

JO 

for t € [0, Tg\. Instead, because of the imperfections, after the time Tg we obtain the perturbed evolution 
U'g = Tcxp(-i / \Hg(t') + Ho)dt') = Ug ■ Tcxp(-^ / " Ul{t')H„Ug(t')dt') (3.28) 

JO JO 

Let us assume in addition, that subsequent quantum gates are performed after time intervals of duration 
^ ''gi i- 6. in between subsequent gates there is also a period At — Tg of free evolution during which 
the inter-qudit couplings perturb the quantum algorithm. Hence, in order to describe the perturbed 
quantum algorithm, we replace each elementary quantum gate Uj in p.26p by 

Uj ^ U.J ■ Tcxp{-i [ ' u]{t')HoUj{t')dt') ■ exp{~iHo{At - Tg)), (3.29) 

JO 

= Uj ■ex-p{^iSHj), (3.30) 
where (in lowest order AHT) the Hamiltonian SHj is given by 

SHj = i?^°^At = ^ ' u](t')HoUj{t')dt' + Ho ■ {At - Tg). (3.31) 

The total time T taken by the ria iterations of the quantum algorithm Uqa is T = Ua ■ rigAt. Equation 
(|3.30p allows us to use the second order expansion of the fidelity amplitude which was derived in the 
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preceding subsection: By setting SHJ^ ~ and SHJ^ — SHj, equation (|3.24p reduces to 
FM = \A{na)\^ = ^-^^aJ2 -^Hul...j-i6HjUj.i...i ■ ul ^_^5HkUk-i...i) 

- 2 £ K - r) ^ - tr(C/Q^ . [/[ ^_iaj,C/,_i...i • U^^ ■ Ul ^_^5HuUk-i...i) + 0{hI). (3.32) 

r=l i,k=l 

Here, the first term in the sum of (j3.32p describes the influence of perturbations occurring in the same 
iteration t G {1, . . . , Ua} and the second double sum describes their influence in different iterations. 

Let us switch now to the simpler scenario of instantaneously applied gates. By letting Tg — *■ 0, we 
find that the effective perturbation 5Hj = HoAt becomes the same for all quantum gates. In this case, 
the sho rt-time behavior of the entanglement fidelity Fi,{na) has been studied in detail by Frahm etal. 



FFSOJ]. In particular, these authors demonstrated that whenever an ideal unitary transformation of a 



quantum map Uqa can be modeled by a random matrix after iterations the corresponding decay of 
the entanglement fidelity is given by 

Ff^^^K) = 1 - ^ - + o{Hl), (3.33) 

where a denotes the relative fraction of the chaotic component of the phase space of this map and ta is 
defined by 

1 1 1 

r " ^ ^tr([/[ ^._ii?oC/j-i...i -t/^ ,._iiJof/fe-i...i)A^' = a-n2-tr(7j2)Ai2^ (334) 

with a < 1. Furthermore, numerical studies indicate that the behavior of higher order terms is such 
that the fidelity decay becomes approximately exponential, i. e. 

f?-'(..J^oxp(-^--l^). ,3.35) 

While this formula was derived considering instantaneously applied quantum gates (r^ = 0), it should 
remain valid for finite Tg G [0, At] as well. The fidelity in the above expression has to be compared with 
the fidelity of a quantum memory after the time T ^ Ua ■ rig At, which was derived in subsection l2.1.4l 



1 ,^^^^„^\ / n 



^^r°app(r = ua ■ UgAt) = exp(^--tr(i/o^)T^j - ^''PV^/j "^'^^ " = ^^'^^^ 

It can be seen that the application of a quantum map slows down the quadratic fidelity decay by a 
factor 2 /{da). Hence, the more chaotic the quantum map_(CT — > 1), the slower is the fidelity decay. 
This is essentially the observation of Prosen and Znidaric PZOlj , who proposed to stabilize a quantum 
algorithm Uqa against static imperfections by devising more chaotic gate decompositions (see section 



3.2.4 Fidelity Decay of Protected Computations 

The goal of this subsection is to derive a formula for the entanglement fidelity of a quantum computation 
which is perturbed by static imperfections, and protected using the PAREC method. It will be shown 
that the quadratic time dependence of the resulting fidelity decay p.33p of an unprotected computation 
will be converted into a linear one. 
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As we showed in subsection I3.2.1[ the total time evolution in the presence of static imperfections of 
Ha iterations of a quantum algorithm Uqa = Un^ ■ ■ ■ U2U1 which is stabilized using the PAREC method, 
is obtained by replacing the k-th quantum gate {k — 1, . . . , Ug) of the r-th iteration by the gate (j3.19p 



Hence, by setting 



Gfe = 9[r,k] cxp(-«^^fci).g[r,fc] • Uk ■ exp(-ii?fc^)5[r,fc]- (3.37) 

^Hli = • Hli ■ g[rM] (3.38a) 
and SHl^ = gj^^,^^ ■ H^^ ■ g^^^^], (3.38b) 

equation (j3.24|) yields the second order expansion of the entanglement fidelity between the total time 
evolution (|3.17p and the ideal time evolution Uq\. (We neglect the first term in (|3.17p which describes 
the time evolution of the first decoupling pulse.) We proceed by calculating the quantities KSH'^i and 
Effl^^, where E denotes the average taken over all random selections g[r,k] from the decoupling set 

According to (|3.20a|) . H^i depends on the random index [t, k], because the time integral of the inte- 
grand ^2*^1^ it')HoV^^l^ {t') involves the unitary V^^l^ it') generating the pulse V^l\^{Tp) = g[r,k+i]glr,k] ■ 
If the elements of the decoupling set Q form a projective representation i? of a group G ~ {0j}"=o^ 
(i.e. if 5j — R{gj)), the pulse 5[r,/c+i]5[T- fc] corresponds to a random member gf of the group. In the 
following we make this assumption and are going to use the notation IIq(X), which was introduced in 
(|3.3|) as the projection of the operator X onto the commutant A' of the group algebra A = R{CG). 
Hence, the average becomes 



/ 1 fTp \ 

E ffl-^; = Eg — V / g], {t')Hogj' {t')dt' + Hg (i/o) • 5t (3.39) 

V^-c Jo / 

= Iig{Ho)-{Tp + 5t), (3.40) 

where gj'if) = T exp(^J^ Hc{t')dt'^ for t £ [0,Tp] denotes the unitary generating the pulse gji = gji{Tp). 
The last identity is obtained analogously to the proof of theorem 12.1.21 by demanding that the control 
Hamiltonian Hc{t') generating gji{t) is within the group algebra A for all t' £ [0, Tp] and for all j £ 
{0,l,...,n,-l}. 

In order to calculate MSH^^, we note that according to (|3.20b[) . H'^^ depends on the random in- 
dex [r, fc] because the time integral of V^^^^ {t')HoV2l\t') involves the unitary V^^^t') generating 
the twisted quantum gate V2^\Tg) = g^r.k] ' Uk ■ g^^^y Let us assume now that the quantum gate 
Uk = exp(— iif J^" f{t')dt') is generated by a gate Hamiltonian K, shaped by a pulse form f{t) such 
that Jq" f{t)dt = 1. The corresponding twisted gate could now be generated by the altered gate 
Hamihonian K'^^^^^ = gir,k] ■ K ■ gf^ i. e. g[r,k] ■ Uk ■ ^jt^fc] = '5xp(-«^fr,fc] lo" fi^'W)- Then, 



^5Hl, = —Y. a]{r exp(+*ifj f f{t")dt") Ho exp(-iXj / 



f{t")dt")dt' + Ho6t]gj 



^ J \xp(^+iK J f{t")dt"^Ug{Ho) exp(^-~iK J f{t")dt"^dt' + Ug{Ho)-6t (3.41) 

= ng{Ho)-{Tg+St), (3.42) 

where the last step is obtained provided that the action of Hg(iJo) is trivial. 

We are now going to use the results of the preceding two paragraphs on E SH[^ and E SH]^^ to calculate 
the average E of the second order expansion of the entanglement fidelity given by equation p.24p . For 
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a traceless Hamiltonian Hq a suitable decoupling scheme G leads to Ilg{Ho) — and we obtain the 
expectation value of the amplitude 



rr 



(3.43) 



d 

r=l j=l 

In order to derive a simple expression for the fidelity, we are now going to consider the limit in which the 
pulses and gates are generated instantaneously {Tp,Tg —>■ 0), but we stress that the crucial step in the 
derivation of our fidelity formula was performed for the general case of finite pulses. In the bang-bang 
limit, we have ~ H^^ = HoAt/2 and (|3.43p simplifies to 

rig rie-l 

EAM = 1 - - E Huj9^Ho9^U,gjHog^))At' + 0{H|), (3.44) 

j=l 1=0 

>^-^\HHl)Ae + 0{Hl). (3.45) 

The last inequality can be obtained by recalling that tr(A^_B) constitutes a Hermitian inner product for 
which the Cauchy-Schwarz inequality applies. We proved the following theorem: 

Theorem 3.2.2. Let a quantum computation consist of Ua iterations of a quantum algorithm Uqa 
consisting of Ug quantum gates. The entanglement fidelity between an ideal computation and a non- 
ideal computation protected by the PAREC method is (on average) given by 

pP^'^^^ina) > 1 - n,ng^tr{Hi)At^ + 0{H^), (3.46) 

where the Hamiltonian Hq describes the imperfections of the quantum computer, and At denotes the 
time in between subsequent quantum gates (compare with fiaure lS.^) . 

Remark. In subsection 12.3.21 we derived a short time expansion of the entanglement fidelity F^^°{T) 
(I2.92P of a quantum memory protected by NRD and argued that a good approximation (valid for all 
times T) is given by the exponential F^^pp{T) given by (|2.97p . Analogously, we propose that for all 
numbers of iterations na a good approximation of the PAREC fidelity is given by 

KTv^M = exp(-n,n,i tr(i?o2) At^) . (3.47) 

As it turned out in this subsection, the decoupling scheme G — {gj}"!^^ employed by PAREC has to 
satisfy the decoupling condition ng(iJo) = A • X, with A € M. In addition, for a finite pulse width Tp, 
the elements of the decoupling scheme should also form a group (or at least a projective representation 
of a group) in order to arrive at (|3.40p . Since the order Hc of the decoupling group does not enter in the 
formula for the resulting fidelity decay, it is always possible to choose G to be an annihilator, such as 
the set Vg of Pauli operators. Equation (j3.46p explicitly exhibits the dependence of the entanglement 
fidelity decay on the number Ug of elementary quantum gates and the strictly linear dependence on the 
numbers of iterations of the unitary transformation Uqa. 

Several straightforward improvements of the basic relation (|3.46p are possible. For example, it is also 
possible to apply the random decoupling pulses not before each elementary quantum gate but less often. 
One random decoupling pulse between each iteration of a quantum algorithm, for example, is already 
enough to get rid of the terms of (|3.32p quadratic in Ua. In this case p.46l) is replaced by the inequality 

^^r"''(na) > 1 - nanl^tr{H'Q)At' + 0{hI), (3.48) 
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at the expense that the term hnear in Ua has a coefficient quadratic in the number of elementary 
quantum gates per iteration Ug. 

In order to determine the decay of the average entanglement fidelity of a quantum memory stabilized 
by NRD we use p.46|) and specialize to the case of Ua iterations of a quantum algorithm consisting of 
Hg identity gates. Denoting the total interaction time between the qudits of the quantum memory by 
T = riangAt one obtains the result 

F^^'^'^^ina) > 1 - nang^tr{H^)At^ + 0{H^) = 1 - ^ tr{H^)AtT + 0{H^), (3.49) 

which is identical to the average NRD fidelity (|2.92p . 

^NRD(y) = 1-1 tv{H^)AtT +..., (3.50) 

of theorem 12.3.21 derived in subsection 12.3.21 by considering bang-bang control. Since we derived the 
PAREC fidelity by considering bounded controls (generating the decoupling pulses within a finite time 
interval Tp), this fact indicates that the NRD strategy remains applicable even if only bounded controls 
are available. 

3.2.5 Numerical Example 

We close the discussion of the PAREC method with a numerical simulation. Let us consider a quantum 
computer with n — 8 qubits arranged on a linear chain, which are perturbed by Heisenberg couplings, 

n— 1 n 

Ho^J2 E J^^'^^iX^X + Y^Y + Z^Z]^^^,^^^, (3.51) 

kx — l ^2— fcl + l 

where the coupling strength between qubits ki and ^2 decays cubically with their separation distance, 
i.e. J^^'^^ = J • |fci — k2\^^ ■ Note that these are the same imperfections as assumed for the numerical 
simulations of the decoupling strategies in section 12.41 As a quantum algorithm we consider multiple 
iterations of the quantum tent map, 

Uqa = exp(-^TO2y^ exp(-iA:l/((z)), (3.52) 

with parameters T — 27r/2" and kT —1.7. A definition of the operators m and q and the tent-map 
potential V can be found in appendix IB. 2 1 It is also explained in the appendix that each iteration of the 
tent map can be decomposed into Ug = — + 4 elementary one- and two-qubit quantum gates, 
which for n = 8 leads to Ug = 248. We assume that the gates and pulses are performed instantaneously, 
and that the time interval At in between subsequent quantum gates is given by At — O.OOIJ"^. The 
simulations cover ria = 10 iterations. Hence, the total run time of the quantum computation is given 
by T = lOugAt = 2.48J^^. The results of our simulations are presented in figure [331 

In figure I3.3al we compare the fidelity F^'^^'' of the unprotected quantum computation with the 
corresponding fidelity F"°"^ of an unprotected quantum memory. The corresponding estimations F^^^^ 
given by (|3.35p with a = 0.294 and F"°^pp given by (|2.27p are also shown (dashed lines). It can be seen 
that the quantum computation itself leads to a slow down of the fidelity decay. If the computation is 
stabilized using the PAREC method, the resulting fidelity F^'^^ (blue) is significantly improved and 
in good agreement with the predicted fidelity F^'^p'~ of equation (|3.47p {dashed line). (The index num 
indicates the fact that the fidelity is obtained numerically by averaging over a subset of 70 random pulse 
realizations.) 

Figure I3.3bl shows an enlarged part of the high fidelity region. In addition to ^t^um (blue), the 
fidelity -Fe^num {red) of a quantum memory protected by the naive random decoupling strategy (NRD) 



65 



3 Decoupling and Computation 



0.80 



0.60 



r 



0.40 



0.20 




10 



^PAREC 



0.5 1 1.5 2 

JT 

(a) Entanglement fidelity of a n = 8 qubit quantum computation. 
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Figure 3.3: Entanglement fidelity of a n = 8 qubit quantum computation perturbed by the imperfections given 
Eacli of the Ua = 10 iterations of the quantum algorithm consists of rig = 248 quantum gates. The 



in (|33T 

time in between subsequent gates is given by At — O.OOIJ"^. 

(a) The fidelity F^^^^ of an unprotected computation, the fidelity F"°"'^ of a quantum memory, the fidelity 
-f^'num' (blue) of the stabilized computation, and the corresponding estimations -F^app (|3.35p . F"°!lpp (|2.27|) . and 
Fe%f (fXiT)) {dashed lines). 



(h) The fidelity (blue) of the stabilized quantum computation, the fidelity _F, 

memory stabilized by NRD, and its estimation -Fe^app l|2.97 



NRD 

e num 



line). 



(red) of a quantum 
In addition, the standard deviation 



of the PAREC and the NRD fidelity is indicated by error bars. The estimate CTfjp'JJ' (|2.124p of the NRD standard 
deviation is indicated by -F^^^app i cr^^'^ {dotted lines). 
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is shown together with its corresponding estimation -Fll^app (dashed) given by equation (j2.97p . The 
memory protected via NRD corresponds to a trivial quantum computation (all the quantum gates are 
identity gates) which is protected by the PAREC method. As predicted by equations (|3.49p and (|3.50p . 
all three fidelities are quite close to each other. Let us focus now on the variance of F^'^REC g^^^ F^^'-'. 
An estimation of the latter quantity cr^p^Q was proposed in subsection l2.4.2l to be given by (|2.124p . This 
estimation is indicated by the two dotted lines representing -Fg'^app ^ ''"nrd- good agreement with 

the actual standard deviation (7|vj™q° indicated by the error bars (red). An interesting observation is 
that the standard deviation ctparec of fidelity -F'i'num' of the stabilized computation (indicated by 
the blue error bars) is considerably smaller. 



3.3 Stabilizing Computations by Increasing the Correlation Decay 



The fidelity decay of an unprotected quantum computation in the presence of static imperfections 
depends on the decomposition of the quantum algorithm into elementary one- and two-qudit gates 
(subsection l3.2.3p . The first non-trivial term in a short-time expansion of the fidelity is called correlation 
function. The larger the value of this cor relation functi on, the faster the decay of the fidelity. Based 
on this observation, Prosen and Znidaric Pro02l : PZOl proposed to stabilize quantum algorithms by 
rewriting them in such a way, that the new gate decomposition leads to an increased decay of the 
correlation function. For a particular type of imperfections, they demonstrated their idea by designing 
an alternative gate decomposition for the quantum Fourier transform PZ01| . An open question is how 



to find good gate decompositions for general algorithms and general imperfections. In this section, we 
are going to demonstrate that the PAREC method of the preceding section provides a solution to this 
question: By viewing the random decoupling pulses as additional quantum gates, PAREC translates an 
arbitrary quantum algorithm consisting of rig quantum gates into one containing twice as much gates. 
This new gate decomposition leads (on average) to an ultimate decay of the co rrelation function. 

We start in the first subsection with a summary of the main results of PZOlj . The second subsection 
explains how the PAREC method wipes out the correlations. As in subsection 13.2.31 we consider ria 
iterations of quantum algorithm Uqa — Un^ . . .U2U1. To keep things as simple as possible, we assume 
that the gates (quantum gates and decoupling pulses) are applied instantaneously {Tg,Tp — > 0). 



3.3.1 Fidelity and Correlation Decay 

In special cases in which an ideal unitary transformation Uqa is not decomposed into elementary gates 
we may simplify (j3.32p by taking Ug = 1 thus obtaining the fidelity decay 

F,{na) = l- ina-\r\)-tv{UQ^^HoU^AHo)At^ + 0{Hi). (3.53) 

T = -(na-l) 

This expression has been studied previously by Prosen Pro02j . It indicates that the faster the decay of 
the correlation function tr(UQ^HoU^^^Ho) the slower the decay of the fidelity. According to an original 
proposal by Prosen and Znidaric [PZOlf this characteristic feature of the fidelity decay can be exploited 
for stabilizing a quantum algorithm against static imperfections. This aspect was investigated in detail 
by these authors for the special case of na = 1. In this case p.32p reduces to the simpler form 

Fe = l- J2 1 tr(C/[ ^._ii/oC/j-i...i • Ul j^_,HoUk-i...i)At^ +0{H^). (3.54) 



d 



cu.k) 



Prosen and Znidaric based their error suppression method on the idea to rewrite a quantum algorithm 
Uqa in such a way that for the new gate decomposition the sum over the off-diagonal elements of the 
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Figure 3.4: Quantum circuit of the quantum Fourier transform for n — 4 qubits (left). The first four gates of 
tire same circuit involving the PAREC method (right). 



correlation matrix C(j, k) becomes smaller than for the original gate sequence (thereby using possibly 
even a larger number of quantum gates). They considered as an example perturbations of the form 
HoAt = VS with V being represented by a d-dimensional matrix randomly chosen from the Gaussian 
unitary ensemble (GUE). Thus, on average the matrix elements of V fulfill the condition (VjkVim) = 
6jm6ki/d. With this kind of imperfections on average the correlation fimction becomes 



(cu.k)) 



-tr(C/,_r, 



.U2Ui-ulu^^...u} 



k-lj 



(3.55) 



The l/d^-term comes from the fact that according to our assumption of traceless perturbing Hamilto- 
nians also our matrices V have to be chosen traceless. (In the case of a non-traceless perturbation V 
this restriction can be achieved by the replacement V i-^ V — T ■ tr(y ) /d) . It should be mentioned that 
this latter l/d^-term was not taken into account in reference PZOlj so that these authors investigated 
the quantity |^tr(C/j_;^ • \j\ ■ 

Prosen and Znidaric considered the quantum Fourier trans- 
Typically, this unitary transformation Uqa is decomposed into 



In order to demonstrate their idea, 
formation (QFT) as an example. 



— \n(n + 2)/2j quantum gates which involve Hadamard operations, controUed-phase gates, and 



swap gates, (compare with the left-hand side of figure see also subsection IB . 2 . 1 1 of the appendix). 

Instead, Prosen and Znidaric used a different decomposition involving — [n(2n + 1)/2J quantum 

gates. In figure the correlation matrix (C(j, fc)) is depicted for both gate decompositions. Compared 

to the conventional gate decomposition (left) the off-diagonal elements of this correlation matrix are 

suppressed significantly by this new gate decomposition (middle). Diagonal values are always constant, 
i.e. (C(j,j))/<52 + 1/^2 = 1. 

Though of interest this proposal of Prosen and Znidaric leaves important questions unanswered. How 
can such an improved gate sequence be found for an arbitrary quantum algorithm ? How can this be 
achieved for repeated iterations of a unitary quantum map ? Is it possible to suppress all off-diagonal 
elements of the correlation function perfectly ? All these questions can be addressed and solved in a 
rather straightforward way utilizing NRD decoupling as described in the preceding section. 



3.3.2 Destroying Correlations with the PAREC Method 

In this subsection it is explicitly shown that the PAREC method is capable of canceling the off-diagonal 
terms of the correlation function {C(j,k)) (|3.55p perfectly. According to equation (j3.14[) . the PAREC 
method translates a quantum algorithm Uqa consisting of ng quantum gates, into one containing 
n'g = 2ng + 1 quantum gates. Let us consider the stabilizing properties of the PAREC method with 
respect to static imperfections which can be characterized by traceless perturbing Hamiltonians of the 
form Ho At = ^ ■ (V ~ X ■ tr{V)/d) ■ S with V chosen randomly from the Gaussian unitary ensemble 
(GUE). The strength of the interaction is reduced by the factor 1/2 so that the situation is equivalent to 
the one depicted in figure [XH where At denotes the time interval in between 'real' subsequent quantum 
gates (not counting the decoupling pulses as gates). These perturbations describe physical situations 
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Figure 3.5: In [{C{j, k))/S'^ + for the QFT with n = 10 qubits using the usual gate decomposition with 

rig = 60 gates (left), the decomposition by Prosen using n'g = 105 gates (middle) and In [E{C(j, + 1/d^] 

using the PAREC method with n'g = 2ng + 1 = 121 gates (right). 



in which in each individual realization of a quantum algorithm the inter-qudit Hamiltonian perturbing 
the dynamics of the qudits of the quantum information processor is time independent but random. To 
eliminate such GUE-governed static imperfections we have to choose an annihilator, such as the set of 



Pauli operators V^, as a decouphng set Q = {5j}"^o 
random gates reduces to the expression 



As a result the fidelity averaged over all possible 



g 



(3.56) 



where the factor 1/4 is a consequence of the reduced interaction strength 5/2. In view of the statistical 
independence of subsequent Pauli operations almost all off-diagonal terms of the correlation function 
vanish, i.e. 

'l 



1 



(J-1)/2| 



1 



itrC/(fe_i)/2| -^7 







, if j = fc 
, if j odd and j = k 
, if k odd and k = j 
, else. 



(3.57) 



Here, it has been taken into account that for all unitary matrices U the relation 



E 



1 



-1 



1 



1 

d2 



(3.58) 



holds since the average is performed over all unitary random Pauli gates gj £ G ~ which are elements 
of an orthonormal unitary error basis. As a result the expectation value of the entanglement fidelity 
becomes 



E(Fe) = l-(2ng + 1)^(1 



> 1 



A2 " 

0(6^). 



\trU, 



(3.59) 
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Alternatively this expression can also be derived by averaging (|3.46p over all elements of the GUE after 
substituting the relevant perturbing Hamiltonian HqAI = {V ~I ■ tr(l/)/d) • S and setting Ua — 1- For 
the special case of a quantum Fourier transform (QFT) the resulting values of E(C(j, fc)) are shown 
on the right-hand side of figure 13.51 In this figure they are also compared to the corresponding values 
resulting from the improved QFT proposed by Prosen. 

The PAREC method works not only for general algorithms, but also for general imperfections: In the 
general case of a traceless Hamiltonian Hq, the quantity C{j,k) defined in (j3.54p becomes on average 
(compare with (j3.44p ) 



EC(j, k) = At^ 



*^'(^(Vi)/2 dlHogi C^o-i)/2 gjHogi) , if j odd and j = k + l 

-t 

(fc-i)/' 

, else 



^il^^'{^(k-i)/2 9iHagi C/(fc-i)/2 g\Hagi) , if k odd and k^j + 1 



(3.60) 



for any decoupling scheme Q ~ {gj}^=o^ satisfying the standard decoupling condition 

- E 9]Hogj = 0. (3.61) 



j=o 

3.4 Stabilizing Computations using Dynamically Corrected Gates 

The PAREC method of section [3.21 combines quantum computation with the naive random decoupling 
(NRD) strategy of subsection 12.3.21 Unfortunately, the suppression potential of NRD is rather low. 
If the imperfections of a quantum computer are described by a Hamiltonian XHq, the decay of the 
entanglement fidelity after the time T is of the order O(A^Atr), where At denotes the time interval 
in between the application of subsequent decoupling pulses. On the other hand, periodic dynamical 
decoupling (PDD, subsection 1 2. 3. ip is able to achieve a decay of the order 0(A''(AtncT)^) . Even though 
the quadratic time dependence of PDD is inferior to the linear one of NRD, the fact that the imperfection 
strength A enters in the fourth power is a serious advantage. In su bsection 13.1.41 we discussed the 
dynamically corrected gate (DCG) of Khodjasteh and Viola KVO^, which combines a single PDD 



cycle with the generation of a quantum gate. By implementing each gate constituting a quantum 
algorithm as a DCG, a complete quantum computation might be stabilized against imperfections. In 
contrast to the PAREC method, that way the resulting fidelity decay of the stabilized algorithm would 
benefit from the PDD characteristics. This chapter considers the general case of decoupling pulses 
being generated by turning on a bounded contro l Hamiltonian for a time Tp > 0. Hence, in place 



of PDD, the Eulerian decoupling strategy ([YK03|, subsection 12.1. 7p has to be apphed. In subsection 



13.4.11 we consider a generalization of the DCG approach of subsection I3.1.4 | from PDD to Eulerian 



decoupling. (In fact the original DCG proposal of Khodjasteh and Viola KVOij ] was for Eulerian 
decoupling.) We compare the error suppression potential of the PAREC method and the Eulcr-DCG 
method for quantum algorithms. By embedding PDD cycles within NRD, the embedded decoupling 
(EMD) strategy was devised in subsection 12.3.21 which combines the advantages of both strategies in 
order to protect a quantum memory. Motivated by this idea, we propose to combine Euler-DCGs with 
the PAREC method in order to protect quantum computations in subsection 13.4.21 

3.4.1 Dynamically Corrected Gates (Euler-DCGs) 

Subsection 13.1.41 dealt with a dynamically corrected gate (DCG) combining a single PDD cycle with 
the generation of a quantum gate Ug. Thereby, the decoupling pulses constituting the PDD cycle were 
assumed to be implemented instantaneously (i.e. in the bang-bang fashion), while the quantum gate 
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time 




Figure 3.6: Schematic representation of an Euler-DCG based on the decoupling set Q = {I, X, Y, Z} and 
the generators F = {X,Y}. The above cycle of length tg = \Q\ ■ |r| • Tp + \Q\ ■ Tg is based on the Eulerian 
path in the Cayley graph of Q with respect to F shown in figure 13771 Hx denotes a potentially time-dependent 
control Hamiltonian which generates the generator X, i. e. up to a phase we have X — Texp(— i f^'' Hx{t')dt'^ . 
Hy is defined analogously. Furthermore, Hg denotes the Hamiltonian generating the quantum gate Ug — 
Texp(— i J^" Hg{t')dt') and Hi denotes the Hamiltonian mirroring the error of Hg, but implementing the 
identity. The gates generated by the applied Hamiltonians are denoted in the second line. 




Figure 3.7: Eulerian path in the Cayley graph of Q — 
{I, X, Y, Z} with respect to the generators F = {X, Y}. 
The edges colored by X are depicted in blue, those col- 
ored by Y are shown in red. After a vertex is visited for 
the last time, a loop (depicted in green) is applied (with 
the exception that the final loop of the vertex assigned 
to the identity element is not closed). 
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Ug was assumed to be generated within the finite time Tg using bounded controls: Ug = Ug{Tg) with 
Ug{t) = Texp(^~i Hg{t')dt') for t G [0, Tg]. Let us assume now that the decouphng pulses have to be 
generated using bounded controls as well. The standard decoupling condition demands that the action 
of the lowest-order average Hamiltonian of a basic decoupling cycle is trivial. If the decoupling scheme 
is given by the set Q = {gj}"^^, the decoupling condition for a PDD cycle becomes (compare with 
equation (PT5|l ) 

, "c-i , 
Ug{Ho) = —Yl a^Hogj - tY{Ho) ■ -I. (3.62) 

3=0 

As we know from subsection 12.1.71 in order to maintain the decoupling condition from above for finite 
pulses of duration Tp, the PDD cycle of length tc — UcAt has to be replaced by an Eulerian cycle. To 
construct an Eulerian cycle, the elements of the decoupling scheme Q have to form a group (strictly 
speaking a projective representation i? of a group is sufficient). After choosing a subset of generators 
r, a n Euler ian cycle is obtained by choosing an Eulerian path in the Cay ley graph of Q with respect 
to r |VK03j . 



We are now going to show how an Eulerian decoupling cycle has to be modified in order to generate 
a dynamically corrected gate. As discussed in subsection l3.1.4l a DCG generates the quantum gate Ug 
within the last step of a PDD cycle visiting the identity element. The error produced by generating the 
gate has to be mirrored during all the remaining steps of the PDD cycle. Since an Eulerian cycle visits 
each element gj S G exactly F times, this means that we have to implement the identity-gates mirroring 
the gate error only once, say after an element is visited for the last time. As a result, the duration of an 
Euler-DCG is given by tg = nc\T\Tp + n^Tg (compared with the scenario depicted in figure [^751 we set 
Ai = Tp for simplicity). Hence the zeroth-order average Hamiltonian of an Euler-DCG implementing 
Ug is given by 

= r E a]{FT{H,) ■ \T\Tp + / ' Ul{t')H,Ug{t')dt')g, 

= IT., (ng(go) • \T\Tp + ng{r Ul{t')HoUg{t')dt')), (3.63) 

l-L \Tp + Tg \ Jo ^ 

where we used definition (|2.53p and theorem 12.1.21 from subsection 12.1.71 If, in addition, the gate 
Hamiltonian generating Ug{t') is an element of the group algebra A = R{CG), analogous to theorem 
12.1.21 we finally arrive at i/'"' = He(i?o), i. e we recover the standard decoupling condition that the 
action of Hg(iJo) has to be trivial. (Note that in order to achieve universal quantum computation, not 
all the gate Hamiltonians are allowed to be in A. Hence, finding a decoupling scheme satisfying p.63p 
is not trivial. The problem might be solved by a suitable subsystem encoding, for example. Another 
possibility would be to employ multiple decoupling groups with different group algebras.) To illustrate 
the method, figure [5TB] shows an Euler-DCG corresponding to the Eulerian path in the Cayley graph of 
Q = {T, X, Y, Z} with respect to F = {X, Y} which is depicted in figure [ 



Fidelity of Protected Computations 

We are now going to analyze the entanglement fidelity of a quantum computation whose gates are all 
realized by Euler-DCGs. The analysis is performed as in subsection l3.2.3l The computation consists of 
Ua iterations of a quantum algorithm Uqa = Un^ . . ■U2 ■ Ui which is decomposed into Ug elementary 
quantum gates. In order to describe the time evolution of the perturbed algorithm, in subsection l3.2.3l 
the j-th gate Uj of the ideal algorithm was replaced by the perturbed gate Uj ■ exp(— jJiJj) p.30p . where 
in the case of instantaneously applied gates SHj was given by SHj = HoAt. Now each gate is realized 
as Euler-DCG. If the underlying Eulerian cycle is based on a decoupling scheme G of length tie = \G\ 
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together with a set of generators T d Q, the corresponding gate time is now given by tg = nc\T\Tp + ncTg. 
Hence the gate error is mainly due to the first-order correction following the zeroth-order term (j3.63p 
describing an Euler-DCG, i.e. we have SHj = H^^ — OIJ^HqY ■ tg). If the quantum algorithm Uqa 
describes a quantum map, according to equation p.35p we expect the resulting fidelity to behave as 

where ta is now of the order 1/ta = 0{nl ■ {H^f ■ t^). 
3.4.2 Combining the PAREC Method with Euler-DCGs 

The PAREC method can be understood as translating a Ug gate decomposition Uqa — . . .Ui ■ Ui 
of a quantum algorithm Uqa into a new gate decomposition containing twice as much gates. If we 
consider Ua iterations of the quantum algorithm, we obtain p.l4p : 

Uqa = • • • V/-)) . . . {Vil . . . l^i^V/^)) (y« . . . V/^)) , (3.65) 

with = 5[T,fc] ■ Uk ■ 5[V,/c] ^2fc-i = 5[r,fe]5[V,/c-i] ^^"^ ^ = 1,2,..., rig and r = 1, 2, . . . , ria. In 

subsection 13.2.41 we showed that a formula for the fidelity decay of a PAREC computation is given 
bydSlZl), 

^rtpf (^a) = exp(^~nang^tr{H^)At') , (3.66) 

where we considered the simplified scenario in which each pulse ¥2^^^ and each gate ¥2^^ is generated 
instantaneously, and where ¥2^^ is separated from V2k^i by the time interval At/2. 

In order to combine the PAREC method with the use of Euler-DCGs we simply propose to implement 
each of the 2ng + 1 gates in equation (|3.65p as an Euler-DCG. As a consequence, each pulse and each 
gate now takes up the time tg ~ 7ic|r|Tp + ncTg instead of At/2. In addition, the error of a pulse and/or 

gate is now characterized by h''^^ instead of Hq, where i/'^"* = 0({Hq)^ ■ tg) denotes the first-order 
correction following the zeroth-order term (|3.63p in the Magnus expansion of the average Hamiltonian 
of the Euler-DCG. Hence we expect the fidelity of the combined stabilization method to be given by 

^PAREC+E.,e.DCG(„^) = exp(-n„n,i tr((i/<^ V)4t^) . (3.67) 

As it was the case for the embedded dynamical decoupling strategy (EMD) which was obtained by 
embedding periodic dynamical decoupling (PDD) into naive random decoupling (NRD), the combined 
stabilization method for computations allows us to benefit from the advantages of both underlying 
methods; The strong suppression 0{{Hq)^) of the Euler-DCGs and the linear decay 0{na) of the 
PAREC method. 
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In chapter [2] we considered decoupling strategies which, with the help of instantaneously applied pulses 
(bang-bang pulses), suppressed the action of a system Hamiltonian describing static imperfections of 
a quantum memory, for instance. The performance of the fundamental decoupling strategy — called 
periodic dynamical decoupling (PDD) — was significantly improved by embedding it into a naive ran- 
dom decoupling strategy (NRD). As a result we obtained the so-called embedded decoupling strategy 
(EMD), which combines the advantages of both underlying strategies (strong suppression and linear 
fidelity decay). In an analogous fashion, by embedding the symmetrized decoupling strategy (SDD), we 
obtained embedded symmetric decoupling (ESDD). We are now going to show how to embed a symmet- 
ric recoupling scheme. In contrast to a decoupling scheme, a recoupling scheme leads to a non- vanishing 
zeroth-order average Hamiltonian describing the desired recoupling. Hence, we have to be careful not 
to affect this zeroth-order term when trying to eliminate residual higher order terms. 

As a specific example, let us co nsider the recently proposed recoupling scheme for dipole-c oupled 



nuclear spins in a crysta lline solid YLM+04| . While in all previously proposed similar schemes JK99 : 



LCYYod ISMOll : lLeu02l | the evolution-time overhead grows linearly with the number of spins, this 



particular scheme leads to an evolution-time overhead which is independent of the number of spins 
involved. Thus, it appears to be well suited for the stabilization of quantum information processors 
against unwanted inter-qubit interactions. This recoupling scheme uses particular combinations of fast 
broadband and slower selective radio- frequency fields to turn off all couplings except those between two 
particularly selected ensemb les of spin s. Thereby, spins within each ensemble representing a particular 
logical qubit are decoupled [LGYY02|]. Furthermore, cross-couplings between selected ensembles are 
avoided by requiring that qubit couplings have to be much stronger than any other couplings within 
each ensemble. Unwanted couplings are suppressed up to second-order average Hamiltonian theory with 
the help of time-symmetric pulse sequences. Despite many advantages in this recoupling scheme the 
residual higher-order interactions accumulate coherently thus leading to a quadratic-in-time decay of 
the fidelity of any quantum state (compare with subsection I3.2.3P . This restricts the achievable time 
scales of reliable quantum computation significantly. 

In this chapter it is demonstrated that the performance of this recoupling scheme can be improved 
significantly by embedding it into a stochastic decoupling scheme (NRD). In contrast to a deterministic 
scheme which repetitively applies a certain sequence of pulses (compare with subsection 12.3.1]) . the 
corresponding stochastic scheme selects its pulses randomly (compare with subsection l2.3.2|) . Stochastic 
schemes are advantageous whenever the set these pulses are chosen from is large. In the case of an 
annihilator like the set of Pauli operators, for example, this set grows exponentially with the number of 
qubits. By a suitable embedding of the recoupling scheme into a NRD scheme based on Pauli operators, 
the coherent accumulation of higher-order residual interactions can be destroyed to a large extent so 
that the fidelity decay of any quantum state is slowed down significantly to an almost linear-in-time 
one. As a result, reliable quantum computation can be perf ormed on significantly longer time scales. 
The results presented in this chapter have been published in KA06 |. 

This chapter is organized as f ollows: Th e basic ideas underlying the recently proposed deterministic 
recoupling scheme of reference |YLM+04| are summarized briefly in section 14.11 for the sake of com- 
pleteness. In section 14.21 a simple restricted embedded decoupling scheme is introduced. Though it 
already le ads to firs t improvements in comparison with the deterministic selective recoupling scheme of 
reference YLM"*"04 1 , its error suppressing properties can still be improved significantly by an additional 
simple symmetrization procedure. We analyze the stabilization properties of this symmetrized embed- 
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ded recoupling scheme for a unitary two-qubit swap gate. In section 14.31 its stabilizing pro perties ar e 



investigated by applying it to the iterated quantum algorithm of the quantum sawtooth map BCMSOl | . 

4.1 Deterministic Selective Recoupling of Qubits 



In this section the basic ideas underlying the recently proposed recoupling scheme of reference YLM"'"04 1 
are summarized. In particular, the form and magnitude of the residual higher-order interaction is 
discussed which cannot be suppressed by the suggested pulse sequences. 

Let us consider n nuclear spin- 1/2 systems in a crystalline solid which are interacting with an external 
static m agnetic field in z-direction. In the rotating wave approximation their Hamiltonian is given by 



Abr6lL chapter IV section II A] 



-1 , n— 2 n — 1 T 

n^fc ^ , Jfei 



ffo = -2^^^fc + 2^ 2^ -f{2ZkZi-XkXi-YkYi) (4.1) 

k=0 k=Ol=k+l 



Hz Ho 

with the Pauli spin operators X, Y, and Z. Thereby, the Larmor frequencies ujk of the first term 
characterize the interaction strengths of these spins with the external magnetic field. Using a magnetic 
field gradient the ojk are adjusted in such a way that the spins can be addressed individually. The 
second term of the Hamiltonian (j4.ip describes the dipole-dipole interaction of the nuclear spins with 
the coupling strength Jki between spins k and I being inversely proportional to the cubic power of their 
distance. To keep the notation as simple as possible, we set h ~ 1 for the remaining chapter. 

4.1.1 Decoupling 

If these nuclear spins are used as qubits of a quantum memory, for example, one has to protect them 
against the perturbing influence of the interaction Hamiltonian (|4.ip . In the framework of a deterministic 
decoupling scheme (chapter [2]) this may be achieved by an appropriate sequence of fast electromagnetic 
pulses. For a E {X, Y, Z}, let us define a global 7r/2-pulse as 

Pa = (g)exp(~zafcV4) = 4- (4-2) 

k=0 

Analogously, a global 7r-pulse is defined as a*^" . A decoupling scheme for the Zeeman term Hz is given 
by the set {X, AT**"}, for instance. Hence, in order to suppress Hz, a series of fast global A®"-pulses 
is applied, leaving the dipole-dipole coupling term Hp inva riant. This latter term can be suppressed 
by the well known WHH scheme {I, P^, PyPx} ( WHH68[, subsection I2.2.2[) . Using the symmetric 



dynamical decoupling (SDD) strategy, the WHH pulse sequence consists of four fast 7r/2-pulses applied 
at times At, 2At, AAt and 5At. Thus, the resulting unitary time evolution after this pulse sequence, 
i. e. at time tc — 6At, is given by 

U{tc) = exp{~iHDAt)Ps: exp{~iHDAt)Py exp{-iHD2At)Py exp{-iHDAt)Px expi-iHoAt) 

= exp{-iHeAt) . . . exp{-iH2At) exp{-iHiAt), ^^'^^ 

with the interaction-picture (toggled) Hamiltonians Hi = Hq = Hd, H2 = Hr, = Pj-HoP^ and H-^ = 
H4 — PxPyHoPyPx- As a consequence, in zeroth-order average Hamiltonian theory (AHT) the time- 
averaged Hamiltonian vanishes, i. e. 

(4.4) 

i=i 

Due to the time reversal symmetry of the WHH pulse sequence, i. e. H{t) — H{tc — t), in AHT all odd 
higher-order Hamiltonians vanish (theorem l2.1.ip : i/^'^^'' = for i e Nq. 
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Figure 4.1: Schematic representation of the unitary W^l quantum gate acting on qubits k and i. Free evolution 
indicates time evolution according to the Hamiltonian Hd over a time interval of duration At. 



4.1.2 Selective Recoupling 

If these nuclear spins are used as qubits of a quantum information processor one also has to implement 
universal sets of unitary quantum gates. In particular, one needs to be able to implement two-qubit 
entanglement gates, such as controUed-phase gates. This can be accomplished by recoupling qubits 
selectively with the help of a Super- WHH pulse sequence as proposed in reference |YLM+04| . Such a 
Super- WHH sequence recoupling qubits k and I consists of three WHH sequences applied to the toggled 
Hamiltonians 

Hf, = ZkZiHoZkZi, (4.5a) 
H^l ^ XkYiHoXkYi, (4.5b) 
and H^l = YkXiHoYkXi, (4.5c) 

respectively. Correspondingly, there are 18 time periods of duration At during which the time evolution 
is described by the double-toggled Hamiltonians Hi = H^l,, H2 = PsH^lPx, et cetera. The appropriate 
WHH pulse sequence of the H^y Hamiltonian, for example, is illustrated in figure 14.11 where free 
evolution denotes the time evolution according to the Hamiltonian Hu over a time interval of duration 
At. The quantum gates resulting from these WHH sequences are denoted by W^y, W^^, and Wy^, 
respectively. The Super- WHH sequence is finally obtained from a combination of these latter quantum 
gates preceeded by the correspond ing time reversed sequence (compare with the inner part of figure 



14. 2p . As a consequence YLMj^Oj], this Super- WHH sequence yields the average Hamiltonian Hd = 

T7(0) , T7(l) , Tr(2) , 

Hd +Hd +Hd -I-..., with 

H^d' = -J2 = Jh {Wi + YkYi + ZkZi) , (4.6) 

Uc = 36, tc = TLcAt, and with the renormalized zeroth-order recoupling strength jj^^ — {Ju/^) x (8/9). 
Due to the time reversal symmetry of the Super- WHH sequence, in AHT all odd-valued higher order 
Hamiltonians vanish, i. e. h'^d — — 0, et cetera. Note that in contrast to the selective decoupling 
schemes of subsection 12.2.31 the selective recoupling scheme presented above changes the form of the 
selected coupling (from 2ZkZi - XkXi - YkYi in gH) to XkXi + YkYi + Z^Zi in (gH)). 

With the help of the zeroth-order recoupled Hamiltonian h'^d of equation (j4.6p one can approximate 
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Figure 4.2: Schematic representation of the two-qubit gate Uki{(l>) obtained by recouphng qubits k and I ac- 
cording to equation (I4.7|l : The W* gates are obtained by reversing the order of the broadband pulses suppressing 
the Zeeman term. Residual second-order terms of AHT can be eliminated by the restricted randomization step 
accomplished by random selective 7r-pulses a^.j G {T, X,Y, Z}. Thereby Oi.k has to be equal to Ui^i to ensure 
that the wanted gate action is not disturbed. Still remaining terms are symmetrized by random 7r/2- pulses 
Pfj. = exp(— i/3i7r/4) , f3i € {X,Y,Z}. Either condition (|4.8p or condition (|4.19p has to be fulfilled depending on 
whether the original Super- WHH or the symmetrized Super- WHH sequence is used. 



unitary two-qubit quantum gates of the form 

[/fcz(0) = exp(-z(XfeX, + YkYi + ZkZi)^) = exp(-zi/f 0) . (4.7) 

Thereby, for a particular value of the phase (p one has to adjust the time Ai between two successive 
pulses of a WHH sequence and the number of times rigwhh a Super- WHH sequence has to be applied 
according to the relation 

j'^j^ ■ ns^i,i,ncAt = 4> (4.8) 

(compare with figure . However, because of the residual higher-order interactions which have not 
been canceled by the Super- WHH pulse sequence, this implementation of a two-qubit quantum gate is 
only approximate. The error resulting from these residual higher-order interactions is dominated by the 
second-order term of AHT which is given by (|2.15cp , 

H'n'--^ E ([kAH,,k]] + [[k,H,],MAt^x\'/' iU = j or j ^ k _ ^^^^ 

^^-^>J>k=l^ ' U else 

Therefore, the lowest-order correction to the recoupled Hamiltonian of equation l|4.6p is given by 
= E [^fc^' (-322 J2j,fe + ^mJl^Jai + 3628 Ja/JafeJfei " 2906 jffeJfei - 13704Vfc,) + 

a 

YkYi (+308 J,Vafc + 308 J,, + 3208 J„/JafeJfci - 2588 J,., - 2588^7^) + (4^0) 
ZfeZ,(+446J,yafc - 322 J,\,J„j + 3580Ja; JafcJfei - 19224\.Jfei - 3458J„Vfc,) 
AiVl728+... . 
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Thereby, only terms ol the form akPi = ak® Pi (E)I{o,i n-i}\{k.i} with a, /5 G {X, Y, Z} are indicated 
as all other terms are irrelevant for our subsequent discussion. As a consequence, the gate Hamiltonian 
resulting from recoupling qubits k and I by a Super- WHH sequence is of the form 



H 



Ikl 



H 



D 



H 



H 



D 



H) 



{XkXi + YkYi + ZkZi) + 0{J{JMf). 



(4.11) 



To estimate the resulting error affecting the unitary gate J7^j ((/)) generated by Hg we study the entan- 
glement fidelity given by (|2.25p . 



\tr(ul{<ly)-U'M) 



(4.12) 



comparing the action of U'f.i{4>) with the action of the ideal gate Um{4>) generated by Hg- A short time 
expansion of Ff, can be derived by using the following lemma. 

Lemma 4.1.1. Let x and y denote Hermitian operators, and let the unitaries U and U' be defined as 
U = cxp{—ixt) and U' — exp(^—i{x + y)t^ , respectively. Then a series expansion of ■ U' is given by 

U^-U'=I-iyt+ ^[x, y]t^ - ^y^ + '-[x, [x, y]]t^ - '-y[x, y]t^ ~ '-[x, y]yt^ + 0{t^). (4.13) 



f(2) 



H 



<4) 
D 



By setting x = Hg , y = H 
condition (j4.8|) . we obtain the expression 



, and the gate-time t = nswhhnc^t = 4>/ j'j^i' according to 



F,, = 



i tr(c/,V0) • UM) f = 1 - ^ tr((i/gV)t2 + o{t^) (4.14) 
= 1 - ©((J^Ai^ . n^wbh^cAi)') = 1 - 0(//(n,whhnc)^). (4.15) 



For a fixed phase 0, the strength of the fidelity decay of (0) is inversely proportional to the fourth 
power of the number of Super- WHH iterations. 



4.2 Embedded Selective Recoupling 

The selective recoupling scheme of the preceding section applies the symmetric dynamical decoupling 
(SDD, see subsection l2.3.ip strategy in order to get a vanishing first-order term in the Magnus expansion 
of the average Hamiltonian describing the time evolution of a single recoupling cycle. However, in 
contrast to SDD the zeroth-order AHT term does not vanish and describes the desired recoupling. In 
this section we are going to show how the recoupling scheme can be embedded into a naive random 
decoupling (NRD, see subsection l2.3.2p scheme. By embedding SDD into NRD, we devised the embedded 
symmetric decoupling (ESDD, subsection I2.3.2|l strategy combining the advantages of both underlying 
strategies. Now, however, we have to prevent the NRD pulses from averaging out the desired recoupling 
action, i. e. they should merely suppress the remaining second (and higher) order AHT term(s) and leave 
the zeroth-order term unaffected. As a consequence, we are not able to suppress the remaining terms 
entirely. Fortunately, the non-suppressible part can be cast into the form of the desired recoupling, 
thereby simply renormalizing the effective recoupling strength. 



4.2.1 Embedding the Selective Recoupling Scheme 

The residual interaction described by the Hamiltonian (j4.10p can be suppressed significantly by embed- 
ding the recoupling scheme of section BTI into a naive random decoupling (NRD) scheme based on an 
annihilator as the set of Pauli operators 7^^. For this purpose we choose at random an n-fold tensor 



79 



4 Selective Recoupling and Randomized Decoupling 



product of Pauli-matrices ai^o <Si on^i ® ■ ■ - ^ ai^n-i, with a^.j G 7^2 = {I, X, Y, Z} for j = 0, 1, . . . , n — 1, 
and apply it before and after the z-th Super- WHH sequence. This way each deterministic Super- WHH 
sequence is embedded within two statis tically independent random Pauli operations. In contrast to 
a usual dynamical decoupling scenario chapter [J) in our case we have to choose the Pauli- 



matrices in such a way that they leave the ideally recoupled gate Hamiltonian of equation (|4.7p 



invariant. This can be achieved by imposing the restriction that the randomly chosen statistically in- 
dependent Pauli spin operators have to be identical for qubits k and I for each Super- WHH sequence, 
i. e. ai^k = 0^1,1 for all i £ {1, . . . , riswiih}- This restriction assures that terms of the form akai in Hg'' 

^ (2) 

remain invariant (compare with figure !?^ . Since Hjj contains no terms of the form akPi with a ^ [3 
(compare with equation (|4.10p ) the Pauli-matrices for qubits k and I can always be omitted, i. e. chosen 
to be the identity, Ui^k = on^i — I. 

(2) 

The only terms of the Hamiltonian H jj which cannot be eliminated by this constrained randomization 
method are the ones containing terms of the form ctkUi {a G {X^Y^ Z}) which are shown in equation 
(j4.10p . However, by an additional symmetrization these terms can be made rotationally invariant so 
that they can be cast into the form of equation (|4.6p . Thus, for a given value of these terms lead 
to a renormalization of the values of the required gate parameters At and riswhh- This rotational 
symmetrization can be achieved by selective 7r/2-pulses as defined in equation (|4.2p . For this purpose 
one chooses one of the three unitary transformations {Pi3i,kP/3i,i}pi^{x,Y,z} acting on qubits k and I at 
random and applies it before and the corresponding inverse transformation after the i-th Super- WHH 
sequence (compare with Fig. 14. 2p . This way the coefficients of the afcCtj-terms are permuted in the 
relevant toggled Hamiltonians. As a consequence one obtains the statistically and rotationally averaged 
second-order contribution 

Eijg^ = (XkXi + YkYi + ZfcZj)4f At2 (4.16) 



with 

•^fcf ^ ^^{-^{'Jlv^ak + JlkJal) + Y^JalJakJkl - -^{JlkJkl + Jlvhl)^ ■ (4-17) 



Here, E denotes the average taken over the aij E 1^2 = {J^, X,Y, Z} and the (3i £ {X,Y,Z}. By this 
combined randomization and symmetrization method the improved recoupled Hamiltonian 

Hg''^ = EiT^' + ^h'd' + Ei?^^ + . . . 

= {Jm + Jki^i" + 0{J{JMf)^ X {XkXi + YkYi + ZkZi) (4.18) 

is obtained. In contrast to H'J^'^ given by equation (|4.1ip . now the effective recoupling strength is 
renormalized and the residual error is suppressed up to fourth order in the small coupling parame- 
ter J At <^ 1. Thus, in order to implement a {7^; ((/))-gate, for example, we now have to choose the 
renormalized characteristic parameter At' in such a way that the condition 

{Jh + 4f Ai'2)nswhhncAi' = (4.19) 

is fulfilled. As a result, in general the required time of free evolution At' depends on the chosen qubit 
pair (A;, I). 



4.2.2 Performance of a Recoupled Quantum Gate 

In this section the stabilizing properties of selective recoupling by the embedded symmetric dynamical 
decoupling (ESDD) method of the preceding section is investigated for a unitary phase gate as described 
by equation (|4.7p . As shown in equation (|4.15p the fidelity of a unitary phase gate Uki{(f>) which is 
realized by recoupling qubits k and / with the help of the average Hamiltonian of equation (|4.1ip (i. e. 
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Figure 4.3: The entanglement fidelity {bottom) of the [/i2(7r/4)-gate on a linear four-qubit chain (top) as a 
function of the number of repetitions riswhh of the Super- WHH sequence: the original Super- WHH sequence 
(diamonds), the unsymmetrized embedded scheme (circles), and the complete embedded scheme with adapted 
pulse interval At' according to (|4.19|l (squares). The solid lines represent the fitting functions exp{~c/nf^^^^^) 
and exp(— CESBD/n^^hh) with c = 0.22 and cesdd = 0.44. 



by applying the SDD strategy) deviates from unity by terms of the order of O {(j)^ / {nswhhnc)'^) . Here, 
J^swhh denotes the number of required iterations of the Super- WHH sequence which is related to the 
time At of the intermediate free evolution and the phase as determined by relation (j4.8p . 

In order to estimate the improvement achievable with the help of the embedded recoupling scheme, 
let us recall our result for the non-embedded original scheme (|4.15|) : 



i tr{ul{ct>) ■ UM) f - 1 - ^ tr[{H^^^yy + ■■■ = !- ©(^V^wbh^c)^) • (4.20) 



This expression is of the same form as the short time expansion of the fidelity of a quantum memory 
protected using the SDD strategy (|2.84p . As we found out in subsection l2.3.21 the corresponding ESDD 
fidelity (|2.110p is obtained by replacing one power of the total time t by the time of a basic cycle. 
Applying these results to the recoupling case, this means that we have to replace one power of the total 
time t — nswhh • ?^cA^ in the preceding equation by the time rtcAi taken by a single Super- WHH cycle. 
As a result we obtain the estimation 



E 



^tr[ul{(b) ■ UM)^ p = 1 - itr((i/^'y)n,„hhneAt • n^At + ... 

= l-O(0VKwhh'^c)), (4.21) 



where we used condition (|4.8p to approximate the relevant condition (|4.19p . 

In figure {bottom) the entanglement fidelity of a unitary f7i2(7r/4)-gate and its dependence 
on the number of performed Super- WHH sequences rig^hh is depicted. In these numerical simulations 
this unitary quantum gate is realized by recoupling of the two central qubits 1 and 2 of a linear four- 
qubit chain (containing the qubits 0, 1, 2, and 3). The coupling strength is assumed to be constant for 
adjacent qubits and to be vanishing between all other qubits (compare with Fig. li.'dK tov)). Apart from 
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Figure 4.4: Quantum circuits implementing the SWAP, the CNOT, and the controUed-phase gate CP(</5) by 
using a U{tt/8) gate generated by Super- WHH recoupling. The single qubit gate Pa{'fi) is defined as Pa{^p) = 
exp(-ia(p/2) = Pl{<fi) for a € {X, Y, Z}. 



an irrelevant global phase this unitary C/(7r/4)-gatc is nothing but a SWAP-gate (compare with figure 
14. 4p . The statistical averaging was performed over 100 runs with statistically independent realizations 
of the random pulses involved. Figure [4?3l (bottom) demonstrates that the fidelity (diamonds) resulting 
from non-embedded original Super- WHH pulse sequences can be fitted well by a function of the form 
exp(— c/rig^jjj^) with c sa 0.22. This is consistent with the simple estimate (|4.15p . Using a recoupling 
scheme based on the embedded procedure discussed in section 14.21 while choosing At according to 
condition (j4.19[) . we notice that the resulting fidelity (squares) is fitted well by a function of the form 
exp(— CESDo/^swhh) with cesdd ~ 0.44, which confirms our estimate (j4.2ip . If symmetrization is 
omitted an intermediate behavior is obtained (circles). 

4.3 Numerical Simulation of a Quantum Algorithm 

In this section the question is explored how much can be gained by stabilizing an iterative quantum 
algorithm by the embedded recoupling scheme of section 14.21 Using the embedded recoupling scheme 
to implement a quantum algorithm is reminiscent of the PAREC-method of section 13.21 in the sense 
that each period of imperfect evolution is suppressed using naive random decoupling (NRD). Hence, 
in addition to the improvement which is achieved for a single recoupled quantum gate, we expect the 
fidelity decay of a quantum algorithm using the embedded recoupling scheme to be linear in time instead 
of quadratic in time. 

4.3.1 Quantum Computation with a Recoupled Quantum Gate 

For purposes of quantum computation one needs to know how to perform two-qubit entanglement gates, 
such as the controUcd-not gate (CNOT-gate) or the controlled-phase gate (CP((/?)-gate), on the basis of 
the recoupled Hamiltonian (|4.7p . Definitely, such quantum gates can be performed only between 
qubits k and I which are coupled, i. e. for which Jki ^ 0. Therfore, in order to be able to entangle 
any two qubits of a quantum computer it is necessary to swap qubit pairs with vanishing coupling 
constants to neighboring positions. Fortunately, such a unitary swapping gate can be realized easily 
by the unitary phase gate of equation (|4.7p because SWAPfcj = Uki{n/A). Throughout the rest of this 
section we will use the quantum phase gate J7fei(7r/8) as a basic building block for all two-qubit quantum 
gates. Thus, the quantum SWAPi:i-gate consists of the repeated application of two such gates. For the 
realization of other two-qubit quantum gates repeated applications of this [/fc;(7r/8)-gate in combination 
with single-qubit gates are required. In figure [44] basic gate decompositions are depicted for the CNOT- 
gate, the CP{(p), and for the SWAP-gate. A description of these gates can be found in appendix IB. II 
These decompositions will be used in the next section for the simulation of a quantum algorithm. The 
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Figure 4.5: Left: The qubits of the nine-qubit quantum information processor are arranged on a lattice. The 
lines connecting qubits i and j indicate the values of the coupling constants Jij; right: The table shows the two 
different values of the coupling constants J^^' for each qubit pair (fc, I). 



UkiiT^/S))- gate itself can be generated approximately either by repeated application of the original or of 
the embedded Super- WHH recoupling sequence using either condition (|4.8p or relation (|4.19p for the 
determination of the free evolution time At between successive fast pulses. 

4.3.2 Lattice Model of a Quantum Computer 

For the subsequent numerical simulations of a quantum algorithm we consider a quantum information 
processor consisting of n = 9 qubits which are arranged on a lattice as indicated in figure 14.51 The 
coupling constants of vertical or horizontal qubit pairs are assumed to be equal while the coupling 
constants of diagonal neighbors are smaller by a factor of 2""^/^ due to the larger distance between them. 
Non-neighboring qubits are assumed to be uncoupled. According to relation (|4.19p this implies that 
in the embedded recoupling scheme two different time intervals At are required for the free evolutions. 
The values of the coupling strengths J^.^ (I4.17P for the 9-qubit lattice used in our subsequent simulation 
are apparent from the table of figure [4751 

In the following it is assumed that a quantum algorithm is performed on this quantum information 
processor according to the following rules: 

(i) Single-qub it gates are performed instantaneously and perfectly. (Even tho ugh in the setting of 



YLM+041 selective gates are generated slowly using weak pulses, reference YLM+041 describes 
a way of implementing them in such a way that the inter-qubit couplings are decoupled during 
the application time. Hence, in good approximation, they might be viewed as being applied 
instantaneously.) 

(ii) Two-qubit gates between vertical or horizontal neighboring qubits are performed by repeated 
applications of the unitary [/fei(7r/8)-gate in combination with single-qubit gates as illustrated in 
figure dm The J7fci(7r/8)-gate itself is generated by applying Super- WHH sequences rigwhh times 
as indicated in figure [321 

(iii) If the target qubits of a two-qubit gate are not vertical or horizontal neighbors they are moved into 
such positions by applying a sequence of SWAP-gates according to the following simple strateg yB 
If the vertical position of the qubits is the same, move the lower qubit to the upper one. Otherwise, 
move the lower one to the same horizontal position and afterwards move the left one as far as 
necessary to the right. 



*A better but more complicated strategy would be to minimize the number of SWAP-gates. Note that due to the simple 
strategy used in this paper the first few iterations of a quantum algorithm take different amounts of computation time 
because the initial positions of the logical qubits are varying and so does the number of SWAP-gates. 
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(iv) A Super- WHH sequence is always applied in such a way that the qubit whose physical position 
has the smaller label (compare with figure H31) is qubit k in W^y, i.e. it is transformed by the 
X transformations. The gate sequence of the CP(iy9)-gate (compare with figure [44]) is applied in 
such a way that the first single-qubit gate is applied always to the qubit with the smaller label. 



4.3.3 The Quantum Algorithm 

In order to investigate the stabilizing p roperties of the embedded recoupling scheme the quantum 



algorithm of the quantum sawtooth map BCMSOl| is simulated according to the rules of the preceding 



subsection. One iteration of the quantum sawtooth map transforms an initial n-qubit quantum state 
|*I'(0)) to the quantum state 

|*(1)) = exp(^~^m^T^ cxp(^-ikV{q)J |*(0)) (4.22) 

with the sawtooth potential V{q) = —■^{q — t^Y (0 9 < 27r) and the (dimensionless) momentum 
operator m whose eigenstates form the computational basis, m|i) ~ for i = 0, 1 . . . , 2" — 1. The 
position operator q is related to the momentum operator via the quantum Fourier transform (QFT): 

9 = t^QFT • ■ Uqft- (4.23) 

Initially the nine-qubit quantum information processor is prepared in the momentum eigenstate |5'(0)) = 
1 1001 10011). The (dimensionless) paramet ers of the sawtooth map are assumed to have the same values 
as in the previous simulations of reference LSO^, i. e. T — 27r/2" and kT = —0.5. Therefore, in Husimi 



e pr 
J, 



functionqj, such as the ones presented in figure 14.81 the dynamics of the sawtooth map are restricted 
to a phase-space cell of size 27r x 27r and its corresponding classical dynamics are integrable. In these 
Husimi functions the initial state corresponds to a horizontal line slightly above the middle. 

Our gate decomposition of the quantum algorithm of this sawtooth map consists of ng — 2n^ + 2n 
quantum gates. A detailed description can be found in appendix IB. 21 In particular, 2 x n{n + l)/2 
quantum gates originate from the two quantum Fourier transforms after which the inversion of the qubit 
positions is taken care of by relabeling instead of swapping. 



4.3.4 Numerical Results 

In figures 14.61 14.71 and 14.81 results of our numerical simulations of the pure state fidelity 

/(i) = |(vE'(t)|vE'idcai(i))r (4.24) 

are presented for different numbers of repetitions nswhh G {5,6,..., 10, 16} of the Super- WHH sequences. 
For each value of ngwhh we calculated the fidelity of the quantum state |^'(i)) of the quantum sawtooth 
map for up to t = 300 iterations as well as the corresponding Husimi functions. 

The quadratic-in-time fidelity decay of the original recoupling scheme is clearly apparent from figures 
14.61 and 14.71 (The corresponding fidelities are plotted in black). This decay is caused by the coherent 
accumulation of errors due to the second-order AHT-term of the Super- WHH sequences involved in 
the realizations of the unitary C//ji(7r/8)-gates. The situation is somewhat reminiscent of the situation 
analyzed in subsection 13.2.31 where it was assumed that each gate is preceded by a static imperfection. 
(Here the imperfection depends on the index pair {k,l).) The i-dependence of the fidelity can be fitted 
by the function 

/(t)-exp(-c.tVn4^hh) (4.25) 

^The definition of a Husimi function is given in appendix IB. 31 
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Figure 4. 6: Upper plot: Fideli ty plots of the quantum sawtooth map implemented with the original recoupling 
scheme of kauthor ?)I|YLM+ 041 ] (1 ower plots black) and the corresponding plots of the embedded recoupling 
scheme (upper plots, red): Dashed curves show the fidelity estimations according to equations (|4.25|l and 
(|4.26|) . Lower plot: Fidelity plots of the embedded recoupling scheme (upper plots, red) and the embedded but 
unsymmetrized scheme (lower plots, blue). 



c 





Figure 4.7: Logarithmic fid elity plots of the quan tum sawtooth map with ns„hh ~ 5 (left) and ns„hh ~ 10 
(right): the original scheme of (author?) YLM"'"04| (upper curve, black), the embedded scheme (lowest curve, 
red), and the embedded scheme without symmetrization (middle curve, blue). 
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with c ~ 0.87 (compare with the seven lowest dashed hnes of the upper picture of figure HTB]) . According 
to equation (j3.35p describing the behavior of the entanglement fidelity in the presence of static imper- 
fections (subsection I3.2.3|l . there should also be a linear contribution in the exponent of (|4.25p which 
dominates the fidelity decay for small numbers of iterations. Neglecting this linear contribution is the 
reason for the slightly imperfect overlap of our fitted fidelities with the corresponding numerical results. 

Using the embedded Super- WHH sequence together with the appropriately chosen free evolution 
times given by equation (|4.f 9p . it is possible to get an almost linear- in-time fidelity decay at least on 
time scales where errors of the order of 0(^J{JAt)^^ are negligible (compare with Figs. I4.6l and [4.7l (red 
plots)). In these cases the fidelity decay can be fitted by the function 



with cesdd ~ 7.85 (compare with the six upper dashed lines of the upper picture of figure 14.61 which 
are almost indistinguishable from the corresponding full curves). The use of the embedded Super- WHH 
sequence does not only improve the action of a single C/fci(7r/8)-gate but also prevents the residual 
imperfections to accumulate during the subsequent application of multiple gates. It can therefore be 
seen as a variant of the PAREC-method of section 

Simulations based on the embedded recoupling scheme without the symmetrization step are shown 
in figure flower part, blue plots) and figure [1771 (blue). The fidelity decay is suppressed significantly 
but on the time scale of these plots it is still quadratic in time. This originates from the fact that 
terms of the Hamiltonian of equation (j4.10p of the form a^ai, a E {X, Y, Z}, are not eliminated by the 
restricted randomization. 

4.4 Conclusions 

We showed how a selective recoupling scheme can be embedded into a stochastic decoupling scheme in 
such a way that the desired coupling remains conserved and that, in addition, the coherent accumulation 
of higher-order errors is suppressed significantly. While we focused on a specific example, the same 
general idea applies to other recoupling schemes as well. Even if computation times of a quantum 
information processor are so long that the residual higher-order interaction term of equation (|4.18p of 
the order of O {j {J At)'^) is no longer negligible, it is possible to suppress also these errors significantly 
by a suitable adjustment of the free evolution time At involved in the realization of the relevant two- 
qubit gates (C/((/))-gates). In generalization of the procedure discussed in section (compare with 
condition (|4.19p ) this can be achieved either by explicitly calculating the fourth-order contribution of 
AHT and by solving the corresponding implicit equation of fifth order for At involving renormalized 
coupling strengths or, alternatively, adjusting the value of At so that the resulting fidelity decay is as 
small as possible. 

Basic properties of our embedded scheme were analyzed for a single two-qubit gate. In particular, it 
was demonstrated that our proposed embedded symmetrized recoupling scheme results in an improve- 
ment of the scaling of the error of a swapping gate with JT-^^h instead of n~^Yih- Here, ris^hh denotes the 
number of repetitions of an embedded Super- WHH sequence which are required for the realization of 
the phase gate. Therefore, in our embedded recoupling scheme fewer numbers of repetitions of Supcr- 
WHH sequences are necessary for achieving a particular degree of error suppression. Typically, this 
also implies fewer pulses which are required for performing a quantum computation with a particular 
error tolerance. This aspect is apparent from the upper plot of figure 14.61 where at i « 70 iterations 
the fidelity of the original recoupling scheme with r7,s„hii = 16 is the same as the one of the embedded 
symmetrized recoupling scheme with riswhh = 6. 

While the original Super- WHH sequence makes use of selective pulses on two of the qubits at the 
same time, our embedded scheme also makes use of simultaneous selective pulses on all qubits. Since 




(4.26) 
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Figure 4.8: Husimi f unctions of the quantu m states resulting from the quantum sawtooth map: (Upper row) 
The original scheme of I (author? )l YLM"*" 04 1 . (Middle row) the embedded but unsymmetrized scheme, (Lower 
row) the embedded scheme. The (7(7r/8)-gates used in the computations consist of riswhh ~ {6,8,10} Super- 
WHH sequences (from left to right). These functions are averaged over 290 < t < 299 numbers t of iterations 
of the sawtooth map. 
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a selective pulse addressing a qubit with Larmor frequency tOk induces erroneous rotations of qubits 
with near by Larm or frequencies it may become important to use correction techniques as described in 
reference |SVCOnl| . 
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One of the fundamental quests of classical inform ation t heory is to transmit information reliably over 
a noisy channel. Addressed by Shannon in 1948 Shai^, his famous noisy coding theorem associates 
to each channel a non-negative number C, the so-called capacity of the channel, and assures that for 
any rate below C, reliable information transmission over the channel is possible with the help of error- 
correcting codes. This chapter serves to provide the background on classical error correction which is 
necessary for the understanding of the forthcoming chapters on quantum error co rrection. F or a mo re 
complete introduction to coding theory we refer to the books of MacKay Mac03j | and Welsh Wel88j | . 

After defining the capacity of discrete memoryless channels in section [O] we take a closer look at 
error-correcting codes in section 15.21 Linear codes form an important subclass of codes and are treated 
separately in section [5731 Eventually, we show in section [5741 that picking a linear code at random allows 
us to transmit information over the binary symmetric channel at a rate arbitrary close to the capacity, 
i. e. we prove a special case of the noisy coding theorem. 



5.1 Capacity of Discrete Memoryless Channels 

In classical information theory, a discrete memoryless channel is a simple model of a noisy channel 
used for information tranmission. It takes as input a symbol from a certain input alphabet Si 
{oi, . . . , fls} and outputs a symbol bj from a certain output alphabet S2 — {bi, . . . , br} according to a 
fixed conditional probability distribution pji — Pr(&j|ai). The r x s dimensional matrix pji is called 
channel matrix. Most of the time we will consider channels where the input alphabet as well as the 
output alphabet is the set containing the numbers from to g — 1. 

The binary symmetric channel (BSC) is the most simple discrete memoryless channel. It is defined 
on the binary alphabet F2 and its channel matrix is given by Pr(a|a) = 1 ~ p and Pr(a l|a) — p with 
a e F2. It is therefore completely specified by a single parameter p e [0, 1]. 

An n-fold extension of a discrete memoryless channel corresponds to n uses of the channel. Such an 
extended channel takes as input a string a = (a^ ^ , . . . , a.i^^ ) € S" and outputs a string b = [bj-^ , ■ ■ ■ , bj^ ) G 
E2 according to the conditional probability distribution Pr(6|a) = Pr(6jj \aii) •Pi'(&j2 1*^42) • ■ ■ ^^(.^jn 

Definition 5.1.1 (Capacity of discrete memoryless channels). Consider a discrete memoryless channel 
X with input alphabet Ei = {ai,...,as}, output alphabet E2 = {bi,...,br} and channel matrix 
Pji = Pr(&j|ai). Let P = {pi, . . . ,ps} be the probability distribution of a source S outputting symbol 
ai G Si, i.e. Pr(ai) = pi. Then the joint probability Pr(6j,ai) of the channel outputting symbol 
bj e S2 and getting the input ai is given by Pr(6j, a^) = Pr{bj\ai) Pr(ai) = PjiPi. The total probability 
of receiving output bj is given by qj = Pr(fej) = X]i=i '^i)- The capacity C(x) of the channel x is 

defined as the mutual information between the source S and the receiver i?, maximized over all input 
probability distributions P: 

C{x) =maxI{S : R). (5.1) 

(The mutual information I{S : R) was defined in equation (|1.5p as ^(5*) -I- H{R) — H{S,R), where 
H{S) = — J2i Pi log2 Pi denotes the Shannon entropy of the source, H{R) = — J2j Qj log2 Qj the Shannon 
entropy of the receiver, and H{S, R) — — J2ij Pi'C^jj o,i) log2 Pr(&j, ai) the joint entropy of source and 
receiver.) 
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Remark. It is straightforward to calculate the capacity of the binary symmetric channel. The mutual 
information is maximal for a uniform input distribution and we get 

C{BSCp) = 1-H2{p). (5.2) 

Naturally, the capacity of the n-fold extension of the BSC is n times its single capacity since the mutual 
information is additive. 



5.2 Error Correction 

Let us assume now that the input alphabet and the output alphabet of the noisy channel under con- 
sideration are both given by the set F^. When a string a? e is sent over the channel, the output will 
be a string y G¥g which is altered by the noise in the channel. What we would like to do is to deduce 
the original input x from the received string y. Such a task becomes feasible only if we restrict the set 
of possible input strings. 

Definition 5.2.1. A g-ary error-correcting code C of length n is a subset C C F^ of all possible q-axy 

strings of length n. The members .if G C of a code are called codewords. 

The next step is to choose a decoding rule T>, which tells us which output strings have to be mapped to 
which codewords. The optimal decoding rule 2?opt decodes an output y as the codeword x G C, which 
has the highest probability Pj:{x\y) of being sent through the channel conditioned on the event that y 
was received, 

T>opt{y) = X ^ C s.i. Pr(x|t7) is maximal. (5-3) 

The probabilities Pr(x) of having codeword x as input must be known to implement such a decoder, 
since 

_ Pr(?7|.x)Pr(.f) 
^ '^^"E.-<Pr(27|f')Pr(^')' ^ ^ ^ 

where Pr(y|x) = ni-P'^(yjki) specified by the channel matrix I'r{yi\xi). Hence, usually a so called 
maximum likelihood decoder is used, which decodes y to the codeword that maximizes ¥v{y\x), 

'^'inik(^) = ^ € C s. t. Pr(^^) is maximal. (5.5) 

For the binary symmetric channel with p < 1/2, the maximum likelihood decoder is equivalent to 
a minimum distance decoder ■Dmin which decodes y as the codeword x that has minimum Hamming 
distance to y, 

^minCy) = X dz C s.t. dist(a', y) is minimal. (5.6) 
For a given noisy channel, code C and decoding rule V, the average error probability is given by 

Perror = ^ Pr(:ri„) Pr(Xout 7^ ^in |^in) = ^Pr(xin) ^ Pr(j7|fin), (5.7) 

where Pr(:Ei„) denotes the probability of having Xi-a as input string. In order to communicate reliably 
over the channel, we have to find a code C and decoder T> such that this error probability, or even better 
the maximum error probability 

terror = Hiax Pr(f out 7^ ^inl^in), (5.8) 

becomes very small. 

The next subsection examines the conditions under which perfect error correction (Perror = 0) becomes 
possible. Afterwards, the succeeding subsection deals with Shannon's noisy coding theorem, which 
tells us under which conditions error correction is possible if we allow some small probability of error 

(i^error ^ ^)* 
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5.2.1 Perfect Error Correction 

If a code C has the property that its codewords are very distinct, it may become possible to reconstruct 
the originally sent codeword x G C from the received y in a perfect manner (at least as long as not to 
many errors occur). To formulate this idea precisely, we need the following definition. 

Definition 5.2.2. The minimum distance d of an error-correcting code C is defined as the minimum 
Hamming distance between different codewords x,y€C: 

d{C)^ ^ min ^ ^dist(f,?7). (5.9) 

x,y^C s. t. x^y 

Lemma 5.2.1. Given a q-ary error- correcting code C of length n with minimum distance c? > 2e + 1, 
information can he sent reliably over a noisy channel as long as the channel does not introduce more 
than e errors. The transmission rate is given by logq(|C|)/?i. 

Proof. To deduce the originally sent codeword x, we use minimum distance decoding. Since the e- 
spheres Se{x) = {s G \ dist(x, s) < e} around distinct codewords of a code with distance greater than 
2e do not overlap, the original codeword can be recovered from the received y as long as no more than 
e errors are made by the channel. □ 

At which rate can we encode information if we want to protect it perfectly against e errors, i.e if we 
demand a distance d = 2e + 1 ? A lower bound on this rate is given by the Gilbert Varshamov bound. 



Theorem 5.2.2 (see e.g. chapter 4.2 in |Wel88l |). Gilbert Varshamov lower bound for q-ary codes. A 
lower bound on the maximum number of codewords Aq{n,d) of a q-ary code of length n with minimum 
distance d is given by 



' n 



A,(n,d)>q-/[Y^[ . (q-l)M. (5.10) 



Proof. Suppose C is a code of length n with minimum distance d and maximum number of codewords. 
There can be no vector in \ C that has distance greater than d from all the codewords of C. All g" 
vectors have to be included in the d — 1 spheres around the Aq codewords. An upper bound on the 
number of vectors contained in these spheres is given by 



' n 



Aq{n,d)-Y^i\{q-iy. □ 



Corollary 5.2.3. For large n the Gilbert Varshamov lower bound becomes 
\ogq Aq{d,n) d d/n d/n 



> 1 - Hq[l. 



/ a an a/n\ 
osj(i--.— Y^---.— yJ- (5-11) 



n 11 69J y q _ I q — 1 

Proof. Setting X — {d — l)/n and writing the sum over i as 



d-l / s An 



: (^)*(i)" 



i=0 ^ ^ 1=0 ^ ^ ^ 

the Chernoff bound 11.2.11 can be applied to obtain the upper bound 

exp,(ni?,[i„g^] (1 - A, A/(g - 1), ... , A/(q - 1))) (5.13) 

if A = [d — ^)/n < (q — l)/q. The proof is completed noting that Hq[iog ] is monotonically increasing 
in A. □ 
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5.2.2 Shannon's Noisy Coding Theorem 

Here we state Shann on's noisy coding theorem for discrete memoryless channels (see e. g. MacOSl 
chapter 10] or WelSSl . section 3.5]). 



Theorem 5.2.4 (Shannon's noisy coding theorem). For any e > and R smaller than the channel 
capacity C , there exists (for large enough n) a code C of length n and rate not smaller than R, together 
with a decoding rule V, such that the maximum probability p*(.rror getting a decoding error is smaller 
than e. 

We will give a proof for the special case of the binary symmetric channel in section 15.41 It can also 
be shown that transmission at rates above t he capa city becomes an impossible task if we continue to 



demand an arbitrary low error rate, see e. g. WelSSl . section 3.6]. 

5.3 Linear Codes 

Definition 5.3.1. A linear q-ary error-correcting code C of length n is a subspace of If C is a 
fc-dimensional subspace, we say C is an [n, k]q code or denote it as C[„jt]^. If its minimum distance d is 
known, we say it is an [n, k, d]q code. 

Remark. The minimum distance d of an [n, k]q code C is the minimum weight of its nonzero codewords 
since d{C) = min^j^j/gc dist(a;, y) = mhig_^Q^^ wt{x). 

If dim(C) = k, C consists of q'^ codewords which are linear combinations of k linearly independent 
generating elements (f^ S F^' (i = 1, . . . , fc). The kxn matrix G whose rows are the gi is called generator 
matrix. The k row vectors of the generator matrix G can be extended to form a basis of by adding 
n — k additional linearly independent vectors gj {j — k + I, . . . ,n). Each element x in FJ^' can then be 
expressed as a linear combination of the gi: x — J^^^i ''J'i9ij ""i G ¥q. The string {uk+i, ■ ■ ■ , Un) G F^"'' is 
called the syndrome. For a given string the syndrome can easily be calculated by matrix multiplication 
with an {n — k)xn dimensional parity check matrix H whose rows hi (i — 1, . . . ,n—k) satisfy hi ■ gj = 
for j — I, . . . , k and hi ■ gj = i^ij-fe for j = k + I, . . . ,n. There is a one-to-one correspondence between 
the cosets of C in F^ and the syndromes. 

When a string y is received over a noisy channel, the set of possible errors is given by {e = y—x\x G C}. 
If C is a linear code, x G C implies that —x is also a member of C. This means that the set of possible 
errors is given by the coset of C in F^ which contains y and which can be identified unambiguously by 
the syndrome s — Hy^ of the received string y. Certain decoders are able to make use of this fact to 
speed up the decoding process to some extent. The minimum distance decoder 'D-mm for example has 
to find the element eo of minimum weight in the coset of C which contains y. For all coset members 
if G y+C the result of the decoder is given by r'min(y*) — if — Sq. Therefore, knowledge of the syndrome 
s = Hy^ of the received y allows the use of a look-up table eo{s) (which has to be calculated only once 
in the beginning) to find the required minimum- weight-element e^. 

In the last section we gave a lower bound (Gilbert Varshamov bound) on the rate of codes with 
minimum distance d. For linear codes we can find a better lower bound (which is sometimes called 
Varshamov bound) by taking into account the structure of such codes. The following lemma establishes 
a relation between the parity check matrix H and the minimum distance d. It is t hen used to prove 
the lower bound given in the following theorem which is a generalization of 
chapter 1, §10] or [WelSS . problem 21 chapter 4] to (?-ary codes. 



MS77. theorem 12 from 



Lemma 5.3.1 (Theorem 10 from chapter 1, §10 in MS77|). If H is the {n — k)x n- dimensional parity 
check matrix of an [n, k]q code, then the code has minimum distance d iff every d—1 columns of H are 
linearly independent and some d columns are linear dependent. 
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Proof. Some d columns of H are linear dependent <^ Hx'^ = for some x with weight d <^ There is a 
codeword x of weight d. The same chain applies to the d — 1 linearly independent columns of H with 
the result that there are no codewords of weight less than d. □ 

Theorem 5.3.2 (Varshamov lower bound for linear q-ary codes). An [n, k, d]q code exists provided that 

l(g-l)-'' <g"-^ (5.14) 



d-2 



3=0 



- 1 
J 



Proof. We construct an (n — fc) x n dimensional parity check matrix H such that all d — 1 columns are 
linearly independent and use lemma [5. 3. II The first column can by any nonzero n — k column vector. 
Suppose we have chosen i columns such that all d — 1 columns are linearly independent. We can add 
another column and keep this property if the number of distinct linear combinations of d — 2 or fewer 
of these columns is less than g"^'''. This number is 



d-2 



j=0 ^-^ 

Remark. As an example we calculate the above bound for a binary code of length n = 11 and distance 
d = 3 and get ^2(11, 3) > 128. The Gilbert Varshamov bound for general codes given in theorem l5.2.2l 
assures us only that ^2(11,3) > 31. 

Remark. The asymptotic version of the above bound coincides with the asymptotic version of the bound 
for general codes given in corollarv l5.2.3l if we replace log^^ Aq{n, d) by k. 

We close this section by giving the definition of the dual code of a code C. Dual codes are helpful 
in connection with quantum CSS codes as will become clear in section [6.31 



Definition 5.3.2. The dual code of a g-ary code C of length n is defined using the ordinary inner 
product of vectors modulo 5, 

= {f G I VcG C, c = (modg)}. (5.15) 
Remark. If C is an [n, k\q code, its dual code is an [n, n — k\q code. 



5.4 Random Linear Codes and the Binary Symmetric Channel 

In this section it is shown that a random linear code can — at least in principle — be used to com- 
municate reliably over a binary symmetric channel at a rate arbitrary close to its capacity. To achieve 
this goal, we do not demand perfect error correction as it was done in lemma 15.2.11 but we demand 
only a small maximum probability Porror of gstting a decoding error. Since we are going to use a typical 
set decoder I?typ, we first need to define typical sets and discuss their relevant asymptotic properties 
in subsections 15.4.11 and 15.4.21 Then, in subsection 15.4.31 it is shown that taking the average over all 
linear [n, k]q codes leads to an arbitrary small error probability p*^^^^^ (for large enough n) which proves 
a special case of Shannon's noisy coding theorem. 



5.4.1 Typical Sets 



This subsection deals with typical sequences HK021 section 2.6]. The asymptotic properties of a set of 
typical sequences allows such a set to be used to construct so-called typical-set decoders. 

A discrete random variable X is characterized by a set of possible outcomes A — (ai, . . . , a^), s = |^|, 
together with an associated probability distribution P — {pi, . . . ,ps) such that X takes on the values 
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tti € A with probability Pr(X = Oj) = P{ai) = Pi. The outcome of an ensemble of n independent and 
identically distributed (iid) random variables X" = {Xi, . . . , X„) is a sequence x = (xi, . . . , .x„) G ^" 
where the probability of getting outcome x is given by P"(a?) = P(a;i)P(a;2) . . - P{xn)- If the ensemble 
is large, the output sequence will contain about p\ ■ n times the symbol ai e A, about p2 ■ n times the 
symbol 02 € ^, etc., which motivates the definition of a subset of typical sequences: 

Definition 5.4.1. The set T^{X) of strongly ^-typical sequences is defined as the collection of strings 
in whose relative frequency distribution of the symbols A is close to the probability distribution P: 



T^{X) = {f e A" s.t. for every x & A, \N{x\x) - nP{x)\ < 



(5.16) 



where N(x\x) denotes the number of times the letter x G A occurs in x (i.e. N{x\x) = \{i \ Xi = a;}|) 
and the logarithm is taken with respect to the base q. 



Theorem 5.4.1 (Asymptotic equipartition property oiTl^{X)). 
(a) For any length n and any x G T^{X), 

^log,P"(f) + if[iog,](X) <(5, 



(5.17) 



or in other words, for all x G T^{X), expg(— n(ff[iog \ {X) — 5)) > P"(x) > expg(— n(iI[iog ]{X) + 6)). 

(b) For any A > and for n sufficiently large, 

Pr(x G T^{X)) = P"(f) > 1 - A. (5.18) 

(c) For any A > and for n sufficiently large, the cardinality ofTg{X) is bounded by 

(1 - A)cxp,(n(iJ[iogj(X) - 6)) < |T,"(X)| < exp^(n(iJ[iogj(X) + <5)). (5.19) 

Proof of (a). 

ll0g,P"(f)+if[,og,](X)| = |^^"l"^^ 



log,P(a;)- ^P(x)log,P(x) 



x£A 



xeA 

xeA °9 ' ' 

= <5-//[:ogj(X)/logJA|<5 



by def. 



□ 



Proof of (b). For each x A, let F^ be the event that X" = [Xi, . . . , X„) takes on a value x G A^ that 
does not satisfy 

5nP{x) 



|iV(a;|f) -nP(x)| < 



log,, 1^1 ■ 



Chebyshev's inequality tells us that 

N{x\x) 



Pr(P,) = Pr( 



P(x) 



> 



dP{x) 



< 



P(x)(l-P(x)) /log,|^K2 



/log^j^y 

V sp{x) J ■ 



If a sequence x is not in Tg{X), it follows that at least one of the events {F^jxeA occurs and by the 
union bound we have 



xeA ^ ' 



which is smaller than any A > for sufficiently large n. 



□ 
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Proof of (c). We prove the upper bound using (a) 



\Tl\X)\ ■ exp,(-n(ff[iogj(X) + 5)) < ^"(^) ^ ^■ 

The lower bound follows from (b) and (a), 

1-A< ^"(^)<in'W|-exp,(~n(i/p„g^j(X)-<5)). □ 

Remark. The set Tg^{X) of weakly (5- typical sequences is defined as the collection of strings in A" 
satisfying property (a) of theorem 15.4. 11 

mx) = [xeA^' s.t. |ilog,P"(f) + i/pogj(X)| <<5}. (5.20) 

It is possible to show that the set of weakly typical sequences also satisfies the remaining asymptotic 
equipartition properties (b) and (c). Therefore it would be sufficient to use weakly typical sets for the 
purpose of typical set decoding. But since we will need the strongly typical set later on in this thesis 
to construct conditional typical sets for the purpose of decoding certain random quantum codes, we 
decided to work with strongly typical sets right from the start. In the following, when we speak of 
typical sets or sequences we always mean strongly typical. 

5.4.2 Joint Typical Sets 

In t he cont ext of random quantum codes, occasionally we'll have to work with the conditional typical 
sets HK02I . section 2.6] corresponding to a certain joint typical set. We present the necessary material 



here, since it fits in this section dealing with typical sets in general. 

Definition 5.4.2. Let the joint probability distribution of two random variables X and Y taking on 
values in the finite alphabets A and B be given by {P{x,y) \ x G A and y G B}. The set of jointly 
strongly 5- typical sequences {x,y) — {{xi,yi), . . . , (a;„, ?/„)) (2? G A" and y e i?") of length n is defined 
by 

mXY) = |(f,y) s.t. for all x e A and y e B, \N{xy\xy) - nP{x,y)\ < |, (5.21) 

L log^ \Ax B\) 

where N{xy\xy) — \{i \ {xi,yi) = {x,y)}\. For a given joint typical set Tg{XY), we define the set of 
typical X-sequences as 

T^"{X) = {xe A" I (x, y) e T^{XY) for some ye B"}, (5.22) 
and we define the conditional typical set for a given x e A" as 

Tp{Y\x) = {ye B- I (f,y) e n\XY)}. (5.23) 
Remark. Any x £ Tg"-{X) also belongs to T^{X). Proof. For all x e A we have 

I Af(a;|a;) — nP{x) | — | (^N{xy\xy) — nP{x, y)) | < \N{xy\xy) — nP(x, y) | , 

which holds for any yeB"-. By the definition of T^"(X), 

El i^^N xi 6nPix,y) 6nP(x) SnP(x) „ 
\N(xy\xy) - nP{x,y)\ < > , \ ^ , / „, < pTT- □ 
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Theorem 5.4.2 (Asymptotic equipartition property of Tg-{XY)). (a) For any {x,y) G Tg{XY), 



iog,p"(x,y) + i/pog^](xr) 



-l0g,P"(f) + Hpog,]W 



-log,P"( 
n ^ 



[log 



](^l^) 



<<5, 

< -5, 

< 26. 



(b) For any A > 0, and n sufficiently large, 



Pr((f,y)er,"(xy)) >i-A, 
Pr(f e r;"(x)) > 1 - A. 

(c) For any A > 0, x G T^"{X), and n sufficiently large, 

(l-A)exp^(n(iJ[i,g^](Xr)-<5)) < \Tl{XY)\ < exp^{n{H[,,^JXY) + S)) , 
(l-A)exp,(n(i/[iogj(X)-5)) < |rr(X)| < exp,(n(ffpog,] W + ^)), 

\T^{Y\x)\ < exp^(n(i/pogj(y|X) + 2<5)). 



(5.24a) 
(5.24b) 
(5.24c) 



(5.25a) 
(5.25b) 



(5.26a) 
(5.26b) 
(5.26c) 



Proof of (a). The proof of the first inequahty is nearly identical to the proof of part (a) of theorem 
15.4.11 To prove the second inequality, note that it was shown in the above remark that {x, y) G Tg {XY) 
implies x G Tg(X). The last inequality is proven by applying the first two inequalities to the expression 
P" {y\x) = P" (x , y ) /P" (x) . □ 



Proof of (h). The proof of the first part is nearly identical to the proof of part (b) of theorem l5.4.1l For 
the proof of the second part, we note that 

s.t. {x,y)<^T^(XY) 

pr((f,y)eT,"(xy))= p^{x,y)^Yl E ^"(^-y) 

(x,y)(iT^(XY) X y 

< E E^"(^'y)= E ^"(2^)-Pr(f errw)- □ 

x€T^"(,X) y ^eT™(X) 

Proof of (c). The proof goes as the proof of part (c) of theorem 15.4. 11 using the results of part (a) and 
(b). For |T5'(y|a;)| only an upper bound can be proved, since the corresponding statement in (b) which 
is needed to prove the lower bound does not hold. □ 



5.4.3 Random Coding 

We are now going to prove a special case of Shannon's noisy coding theorem (theorem I5.2.4p . We 
consider the binary symmetric channel with error probability p, the capacity of which was shown to be 
1 — _ff 2 {v) in ccjuation (|5.2p . 

Theorem 5.4.3. Let BSCp be the binary symmetric channel with error probability p and let e > 0. 
Then, as long as 

^<C{BSCp)^l-H2{p), (5.27) 

and for large enough n, there exists an [n, k]q code C, together with a decoder T), such that the maximum 
probability p*f,rror of getting a decoding error is smaller than e. 
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Proof. A binary linear [n, k]2 code C is a A:-dimensional subspace of . Hence it is completely specified 
by an (n — fc) X 71 dimensional parity check matrix H such that H ■ — for all a? G C. If we want 
to use such a code to send information over a n-fold extension of the binary symmetric channel with 
bit flip probability p (BSC^), we need to specify the decoding algorithm. Let X be a random variable 
representing the error of BSCp, i. e. X takes on the values A — {0, 1} with probability P — {1 — 
We are going to use a typical set decoder Ptyp which calculates the syndrome H ■ of the received 
vector y S F2 , and checks whether there is exactly one error vector e within the typical set Tg{X) such 
that H ■ — H ■ . If this is the case, the decoder outputs Xout — y — otherwise it produces a 
decoding error. 

We are now going to determine an upper bound on the maximum decoding error probability Pcrror- 
Since the error produced by the BSC^ does not depend on its input a;in, the probability Pr(.Tout 7^ 
Xi-a\xi-a) of getting a decoding error does not depend on the input a'in, either. Hence, 

= max Pr(fout ^ S'inl^in) = Pr(fout ^ :?in)- (5.28) 

To estimate the decoding error probability Pr(a;out 7^ a?in), we have to sum over all possible errors 
produced by the BSCyi 



1 if typical set decoding for e fails 
else 



Pr(fout Xi„) = ^p-(l-p)"- 

= ^ p'il - pY^" ■ l[typical set decoding for e fails] . (5.29) 

Here we denoted by e = wt(e) the number of Is in e, a notation we shall use throughout. The function 
returns 1 if the boolean expression x is true and if it is false. We split up this sum into a sum 
over typical errors and a sum over the remaining ones. The later can be upper bounded by theorem 
15.4.1b leading to 

Pr(.fout ^ Xin) < A + ^ p^(l - p)"-^ • l[typical set decoding for e fails] . (5.30) 

e-eT,"(X) 

The sum over the typical errors can be upper bounded by 

s. t. e^^e 

^ p^(l-p)"-^- ^[H-{e-(^)'^ = Q^]. (5.31) 

e-eT,"(X) e'eT,"(X) 

Now we take the average of 73*11.0^ over all linear codes. Let 

An,k,q = {C C I C is an [n, k]q-coAe} (5.32) 

denote the set containing all [n, k]q codes and let 

An,k,q{^) = {Ce Ar,M.q \x£C} (5.33) 

be the subset of codes which contain a certain nonzero codeword x £¥^. In the following we need an 
upper bound for the quantity |A„^fc^2(a?)|/|^ri.fe.2|- It is proved in coroUarv IC . 1 . 21 in appendix IC . 1 1 that 
such a bound is given by 

^^mM = ^<^. (5.34) 
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With the help of the above bound we obtain 

s. t. e 

<A+ J2 P^i^-PT-'- E (1/2)"-' by 631 

< A + (|TJ'(X)|-1)2'=-" 

< A + 2«(-f^=(p)+'5)-"+'= by theorem [533t. (5.35) 
This quantity becomes arbitrarily small for large enough n as long as 

-<l-H2{p)-5. (5.36) 
n 

Since the above statement holds for any 5, we are free to choose 5 as small as we like. Hence, for any 
e > and any rate R below the channel capacity C(BSCp) = 1 — i?2(p), there exists (for large enough 
n) a linear code C of length n and rate not smaller than R, such that the maximum probability Porror 
of getting a decoding error is smaller than e. □ 

Remark. The achievable rate for reliable transmission over the BSCp as proven above is given by 
1 — H2[\og,^]{p) ■ Demanding perfect error correction of up to np errors, the Gilbert- Varshamov bound in 
corollarv 15.2.31 assures the existence of codes with a rate of at least 1 — H2[\og^]{'^p)- Let the maximum 
value of tolerable noise Pmax of the BSCp be defined as the value of p for which the transmission rate 
becomes zero. By comparing the two rates we find that permitting a small decoding error probability 
results in a value of Pmax twice as high as in the case of perfect error correction. 
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To be of any practical use, a quantum memory has to be accessible from the outside to allow for 
measurements and the manipulation of the stored data. Therefore, it can never be isolated perfectly 
from the environment and has to be treated as an open quantum system, i. e. as part of a larger quantum 
system. In such a system, the most general state evolution is not unitary anymore, but is given by a 
trace preserving completely positive map (tpcp-map) A : S{'H) S{H) between density operators on 
a Hilbert space H describing the system. Whereas unitary evolution is — at least in theory — always 
reversible, an error described by a tpcp-map can in general not be reversed, i. e. there exists no tpcp- 
map TZ such that TZ{A{p)) — p for any p e S{Ti.). To be able to perform quantum error correction, we 
therefore have to demand less. The trick is to restrict our attention to a subspace C, called quantum 
code, of the Hilbert space of the quantum memory which has to be protected. The question is whether 
it is possible to undo an error described by a tpcp-map A at least on such a subspace C. 

In section [6Tl we present the necessary and sufficient conditions a quantum code has to fulfill in order 
to be able to recover from a given set of errors. An important family of quantum codes is given by the so- 
called stabilizer codes, which are discussed in section [521 CSS codes form a subclass of stabilizer codes 
and are treated separately in section 16.31 By encoding a quantum register which is already encoded 
by some 'outer' stabilizer code a second time, this time using some other 'inner' stabilizer code, one 
obtains a so-called concatenated code as we will discuss in section [631 



6.1 Reversibility of Quantum Operations 

Definition 6.1.1. A quantum error-correcting code C is a subspace of the Hilbert space of a quantum 
memory which we would like to preserve. For instance, a code which protects k qubits might encode 
them into a 2'^ dimensional subspace C of the Hilbert space TC = TCf^ of n physical qubits. 

Is it possible to undo a quantum error described by a tpcp-map A on such a subspace C, i. e. does 
there exist a recovery operation described by a tpcp-map TZ such that 

n{A{p)) = p (6.1) 

for all p € S{C) ? The necessary and sufficient condition a quan tum co de has to fulfill to allow for the 
recovery from a tpcp-map A was found by Knill and Laflamme KL97l | : 



Theorem 6.1.1 ( KL97t lNCSB98l |l. Let {A^} be the operators in an operator sum representation of a 



tpcp-map A : S(Ti.) S{Ti.), 

A:p^A{p) = Y,A^pAl. (6.2) 

Then a necessary and sufficient condition for reversibility of A on a quantum code C is given by 

UcAlA.Uc = HcC^,, (6.3) 
where He denotes the projection on the code space and C^^i, is a Hermitian matrix. 

Remark. The operator sum representation is not unique. But since different representations {A^},{B^} 
of a certain tpcp-map are related as = u^^uBu with unitary the criterion given above does 
not depend on the representation. 
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Let us introduce the set containing all n-fold tensor products of Pauli operators, 

V'^' = {XZ{a)\ae¥f}, (6.4) 

as defined in section 11.21 as a basis for quantum errors acting on a quantum memory consisting of n 
qudits of dimension q. 

Lemma 6.1.2. // we consider a subset £ C Vg of such error operators and Knill and Laflamme's 
condition is satisfied for all errors Ea € £, i.e. 

IlcElEbRc - ^cCab for all Ea,b e 5, (6.5) 

then the quantum code C allows for the correction of all tpcp-maps whose operator sum representation 
contains only elements which can be written as linear combinations of the Ea € £. 

Proof. If the elements of a operator sum representation {A^} of A can be written as — Of^iEi 
with Ei e £ and (|6.5p is satisfied, then equation (j6.3p is satisfied, too: 

UcAlA^Uc = Yl <^^-3^cEjEJUc = He ^ a^.a.jCy = UcC'^,. (6.6) 

□ 

Definition 6.1.2. For a given set £ C 7^^', a code is said to be degenerate if the matrix Cat in (|6.5p is 
singular. 

Definition 6.1.3. A code is said to correct t errors if (|6.5p is satisfied for the set £ containing all Pauli 
operators which are composed of at least n — t X's. If we define the weight of a Pauli operator as the 
number of qudits on which it acts non-trivially, the statement can be reformulated as follows: A code 
is said to correct t errors if (|6.5p is satisfied for the set £ = {Ei £ V^l wt{Ei) < t}. 

Definition 6.1.4. A quantum code is said to have minimum distance d if it detects all errors in 
£ = {E^e V''^\ wt{E,) <d-l}, i. c. if UcE^Hc = a^Hc for all E^ e £ with a, e C. 

Remark. A quantum code with distance d > 2t + 1 corrects t errors because (|6.5p will be satisfied for 
the set £ ^{E,e wt{E^) < t}. 



6.2 Stabilizer Codes 

The stabilizer code formalism has been developed mainly by Gottesman in lrTOt9 6':'Got97^. It has been 
generalized to handle quantum systems of dimension higher than two in [Got99l : iRai99i] . This section 
deals with quantum systems of dimension q (prime), but in principle q could also be a power of a prime. 
The stabilizer formalism proposes the common eigenspaces of an abelian subgroup of the Pauli group 
as codespaces. Since and the space F^", which forms a group under addition modulo q, are 
related by the ray representation p.26p . stabilizer codes can be described in two equivalent ways. We 
will focus mainly on the description in the F^" picture. 

6.2.1 Stabilizers and Codespaces 

Definition 6.2.1. A stabilizer is a self-orthogonal subspace L C F^" with respect to the symplectic 
inner product, i.e. L C L-^ where L-^ — {x G F^" | \/l E L,{x,l)sp — 0}. Equivalently, using the 
XZ{-) representation, a stabilizer S = {u>^XZ{l) \ I E L,k E Fg}0 is an abelian subgroup of the Pauli 
group <P^. 

*If g = 2, oj* should be replaced by € {±1, ±*} 
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2n 



9i 



hi 



9n-k 



<Jn-k+l 



Figure 6.1: A stabilizer code is specified by the 
generating elements Qi = {gi^gt) £ F^" of a self- 
orthogonal subspace L — span{^i , . . . , ^,i„fc} C . 
Any extension of these vectors to a hyperbolic basis 



Ff = 
ing. 



span{gi, . . .^g„_,hi, . 
sp = and {hi, hj)sp 



.,h„} with {gi,hj)sp = Sij, 
■ 0, specifies a specific encod- 



Remark. An {n — fc)-dimcnsional self-orthogonal subspace L C F^" can always be specified by n — fc 
linearly independent generating elements, e.g. L — spanjgi, . . . , with gi = {gf,gf) £ F^" for 

i — 1, . . . ,n — k. 

Lemma 6.2.1 (see e.g. commutative subgroup S C corresponding to an 

{n — k)- dimensional self- orthogonal subspace L C F^" divides the Hilbert space 7i^" into common 
eigenspaces of dimension . 

Proof. The construction of a basis of such a g'^-dimensional eigenspace in the next subsection implies 
the proof. □ 

Definition 6.2.2. The g'^-dimensional eigenspaces corresponding to an (n — /c)-dimensional stabilizer 
L C C F^" can be labeled by a vector s e F^^*^. They are defined to be the corresponding stabilizer 
codes C{L,s). We will use the notation [[ra, A;]], code to denote an {n — fc)-dimensional stabilizer code 
L, or strictly speaking, to denote the collection of all code spaces C{L,s) corresponding to a specific 
stabilizer L of dimension n — k. If the distance d of an [[n, k]]g code is known, we say the code is an 
[[n, k, d]]q code. 

Remark. We will see below that all these code spaces are equivalent in the sense that they have identical 
error correcting properties. 

6.2.2 Encoding Operations 

Lemma 6.2.2 (see e.g. HamOS; Ham03 : WMUO^). For a given set {gi, . . . , gn-k} of generating 
elements of some self-orthogonal (n — k)- dimensional subspace L C L-*- C F^", it is always possible to 
find vectors {gn-k+i, ■ • • jffn} and {hi, . . . ,hn} such that 

[gi,hj)sp = kj, i9i,9])sp = 0, {hi,hj)sp^O. (6.7) 

Vectors {gi, . . . , (jn, hi, ... , /i„} satisfying the above conditions are said to form a hyperbolic basis o/F^". 

Remark. Note that = spanjgi, . . . , g„, hn-k+i, ■ ■ ■ , Ki}- is called the normalizer. 

We are now going to show that such an extension of the generating set of a stabilizer to a hyperbolic 
basis together with a set of phase factors to be defined below, completely specifies a unitary encoding 
operation. Let us define the operators 

Z, = eS)XZ{gi) X, = e.,{i)XZ{hi) (6.8) 
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using some fixed set {6a{i) € {uj^\r e ^q}}ae{x,z},ie{i...n} of phase factors, and let us define tlie 
abbreviations 



= (g)---0X"" =XZ(u,0), (6.9a) 

i=l 

n 

T = Y[X\ ^Z"'®---® Z"" = XZ{Q, v). (6.9b) 



1=1 



Since tlie {Zi}ie{i,...,n} commute with, each other, there has to be a non-empty common eigenspace 
with eigenvalue list (Ai, . . . , A„). Let us define |0, . . . , 0) as a normalized vector in this eigenspace. By 
applying the operator to both sides of the eigenequation 



Z,|0,...,0) = A,|0,...,0), (6.10) 



and by making use of the fact that ZiXi ~ uXiZi, we find that the state X |0, . . . , 0) is an eigenstate of 
the {■^i}i6{i,...,n} with eigenvalue list (Aia;"^ . . . , A„a;""). Hence there have to exist at least 9" different 
eigenspaces, each of which must be of dimension one. In the following we will always chose |0, . . . ,0) 
as the common eigenvector with eigenvalue list (Ai, . . . , A„) — (1, . . . , 1). The encoding operator C/enc 
is defined as the unitary which maps the states \u) of the computational basis onto the states |u) = 

^"|0,...,0), _^ 

C/e„c :X=|0,...,0) = |mi,...,m„) K^X"|0,...,0) = |ui,...,M„). (6.11) 
It is straightforward to show that i) 

T\h,...,L) = u;''-%,...,L) (6.12) 

and that ii) 

U.ncX^Ul, = ir U.ncZ^Ul, - T. (6.13) 

Because of equation (|6.13p . we will call the operators {Xi, Zi],i^^i „} defined in (|6.8p encoded X- and 
Z-operators. 

Remark. The Clifford group consists of all operators which map Pauli operators to Pauli operators. It 
follows from equation (|6.13p that C/enc is an element of the Clifford group. 

The codespace with label (sometimes called syndrome) (si, . . . ,s„_fc) is the common eigenspace of 
(the generators of) the stabilizer {.^i}ie{i,...,n-/£}i with eigenvalue list (w^^ , . . . , w''""'') and can be 
written as 

C[L, s) = span{|si, . . . ,s„_fe,ci, . . . ,Cfc) | (ci, . . . ,Cfe) G F^^}. (6.14) 
An encoded quantum state is given by 

C(L, s) 9 = ^ q;ci,...,cJsi, . . . ,s„_fe,ci, . . . ,c/c), with aci,...,cfe € C. (6.15) 

Cl,...,Cfc 

Operators {Zi, Xi\ifz^n-k+i n] manipulate the encoded state, i.e. they perform logical Zi^n+k and 
Xi-n+k operations on the {i — n -\- A;)-th encoded qudit. 

For a given hyperbohc basis {51, . . . , gn,hi, . . . ,hn} of F^", any vector a G F^" can be expressed as 
linear combination of the basis elements, 

a= (ai,...,o^,ai,...,a^) 

^ " ^ (6.16) 

= '^{s^h, + nig,) + {li-in-k)hi + li-(n-k)9i}, 

i—l i—7i — k+l 

where Si = {gi,d)sp, et cetera. Together with equation (|1.25p we obtain the following lemma. 
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Lemma 6.2.3. Any Pauli operator XZ{a G F^") G can be expressed (up to a phase) as product of 
some powers of the operators XZ{gi), XZ{hi), 



XZ{d) ^ W {XZ{h,y^XZ{g,Y^) \{{XZ{h,+n-kf XZ{g^+n-kf^), (6.17) 



or by using the operators Zi^Xi defined in 

n—k k 



- n (^r^r) XWUn^^tn^k) - X'-' \ (6.18) 

i=l i=l 

where the strings s,n ^ F^~'^ and P, P G F^' are defined in (j6.16p . 
6.2.3 Correctable Errors 

For which sets of errors £ C is Knill and Laflamme's condition for reversibility satisfied on the 
codespaces C{L,s) of a stabiUzer code, or in other words, what are the errors that can be corrected ? 
As we will see, neither does the answer depend on the label s of the codespace we have chosen to encode 
some information, nor does it depend on the encoding operation C/cnc- 



Lemma 6.2.4 (see e.g. Got97|). Let TIc(l.s) be the projector on the codespace C{L,s). Then equation 
(j6.5|) with the substitution He i— ^ ^^{l.s) will be satisfied for £ C T"^ iff for each Ea, Ei, (z £ one of the 
following holds: 

• EI^Ei, is an element of the stabilizer S. 

• There exists an element in S that does not commute with E^Ei,. 

Proof. We are going to show that if one of the above conditions is satisfied for each Ea, E^ G £, equation 
(j6.5|) will be satisfied, too. If not, i. e. if there exists E\Eb ^ S and there doesn't exist any element in S 
that does not commute with E^Ei,, then equation (|6.5p cannot be satisfied. The first point is equivalent 
to Uc(L,s)ElEbIlc(L.s) — ^c{L,s)Cab, with Cab = 'J^'^, k G Fg. Regarding the second point, let M be the 
non-commuting element in S and let its eigenvalue of the eigenspace C(L, s) be m, Af H^^^ = mllc(^]^ . 
Then, 

mIk:^L,s)EiEbUc(^L,s) ^ 'nciL,s)EiEbMUc(^L,s) ^ to^'Tlcf^L^^M ElEbUc(^L,s) ^ Lo''mUc(^L,s)ElEbUc(^L,s), 

for some a; 7^ G F, and it follows that (j6.5p is fulfilled with Cab = 0. The remaining possibility is 
that E^Eb ^ S, and there doesn't exists any element in S that does not commute with ElEb. It follows 
that E^Eb commutes with the stabilizer, but is not in the stabilizer itself. Hence, it performs a logical 
operation on the encoded data and equation (|6.5p cannot be satisfied. □ 

To visualize the structure of the correctable error sets £ C V^, let us first define three quotient groups 
together with their corresponding transversals (generating sets for the coset decompositions): 

• The cosets of L-^ in F^" (F^"/L-'-). Let a transversal of this decomposition be given by G = {fa}, 
i.e. faL-^ n fpL-^ = if a 7^ /3 and VJfaL^ = F^". (Note that in the case under consideration 
faL^ ~ {fa ^ I I I ^ L-^}^ where the group multiplication rule x is addition modulo q.) There 
are \C\ = jq^+k _ ^n-k g^g]-^ cosets. 

[For a specific encoding specified by a hyperbolic basis {gi, . . . , gn, hi ... , /i„} we could choose 
G = spa.n{hi, . . . ,hn-k}, for instance. Each of these cosets might be labeled unambiguously 
by a syndrome vector s G F^"*' such that Si = {gi,v)sp, where v is an arbitrary vector in the 
corresponding coset.] 
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{ 

faL^ { 



Figure 6.2: All elements of F^" (gray boxes) are arranged in cosets F,"/!/ (black boxes) generated by some 
stabilizer L. A corresponding stabilizer code corrects a subset £ C F^" iff in each row of the diagram no more 
than one black box is populated by members of £. 

• The cosets of L in [L^ /L). Let a corresponding transversal be given by — {Z^lr}- There 
are \G-^\ = (f-^^ — ^2*: g^^^j^ cosets. 

[For a specific encoding we could choose — span{g„_fe+i, . . . , 5„, hn-k+i, ■ ■ ■ , hn}, for instance. 
Each of these cosets might be labeled by a logical error vector I = (1^,1^) G F^*^ such that 
If — {gi+n-k,v)sp and Z| — (v, hi-f-n-k)sp, where v is an arbitrary vector in the corresponding 
coset.] 

• The cosets of L in F^" (F^"/L). A corresponding transversal might be obtained by taking the 
direct product G (g) G-^. There are \G ® G-^\ — q^-^q^^ = such cosets. 

[For a specific encoding we could choose G®G^ = spa.n{gn-k+i, ■ ■ ■ , gn, hi, . . . , hn}, for instance. 
Each of these cosets can be labeled by a vector (s, I) £ F^+'^.J 

Obviously an error set £ C Vg can equivalently be expressed as a subset £f C F^" s. t. £ — {XZ{e) \ e E 
£f}. In the following we will use the same notation £ for both sets. 

Corollary 6.2.5. Using the coset language, a subset £ C F^" can be corrected by a stabilizer L, iff in 
each of the cosets of in F^", no more than one of the W'^'"' / L-cosets includes elements of £ (compare 
with fiaure lK^) . 

Proof. If a F^"/i-coset includes some elements d,b G £ it follows that — a + b G L and the first of the 
two conditions in lemma [B. 2. 41 is satisfied. If there is no more than one F^"/L-coset populated within 
a F^"/_L -'--coset, it follows that for all a, 6 e £ s.t. — a + b ^ L, — a + b ^ L-^ which is equivalent to 
— a + b G F^" \ L-^, and there exists an element g G L s.t. (g, — a + b}sp ^ and the second condition 
in lemma IB. 2. 41 is satisfied. □ 

Remark. Since errors in different F^"/L-'--cosets lead to different syndromes when the stabilizer is 
measured, and errors in different F^"/L-cosets generate different encoded operations, the corollary 
makes the following intuitive statement: All errors having the same syndrome must act in the same way 
on the encoded information. Otherwise, knowing the syndrome wouldn't be enough. 

Lemma 6.2.6. A stabilizer code is degenerate if and only if more than one element in the error set 
£ Q F^" belongs to the same coset of L in F^". 

Proof. If the code corrects £, the condition 

IlciL.S)XZia)^XZ{b)nciL,i) = nc(L.j)C. g (6.19) 

is satisfied for all d,b G £ and for all code spaces C(L,s). According to definition 16.1.21 in order to 
determine whether or not the code is degenerate, we have to determine whether or not C- g is singular. 
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We do this by examining the eigenvalues of C- g. Note that each element a in £ can be decomposed as 
in ([QB]) . 

n—k n 

a = Y,{sih,+n,g,)+ ^ (^tin-fc)^* + , (6-20) 

i=l i—n—k+1 

and the corresponding Pauli operator XZ{a) can be written as X*'*'' -* (gee lemma l6.2.3p . Let 

us sort the elements of £ according to their syndrome s = (si, . . . , s„_fe). Then it is clear that (C- j) 

becomes block-diagonal since HciL^sj^^io-V ^^^)^c(l,s) = for s(a) ^ s(6). We restrict our attention 
to one of these blocks, i. e. we consider only elements of £ with the same syndrome s. Corollary 16.2.51 
tells us that there is only one coset of L in the coset of in F^" characterized by s which is populated 
with members of £. Let us assume first that £ contains all q"'~^ members of this particular coset of 
L. The Pauli operators of these members are given by the set {x''^'' ''}-gj,n-fc and the matrix 

elements Cfj,^ of the block are given by 



(6.21) 



Cn,mllc(L,5) = llc(L,s)(,-^ ){^ ^ jllc(L,5) = 

Using the fact that X^msF""'" oj"^'^ /q^^^ = (5^^ we find that the unitary 

E "?.ni^(^i= E ^^-"yv^^i^xni (6.22) 

-fc Cfl.y5,|n)(m|, 



diagonalizes c = Es.meF? 



W= ^ |?)(J| = (6.23) 

Hence the eigenvalues of the block c are ((/"^'^jO, ... ,0) which makes the block singular. Inverting 
the diagonahzation leads to c = with = u^js) ~ X^igF"^*" ^~'V\/9"~'^I^- If the set £ 

contains only a subset S of the g"-*^ members of the coset of L, we have to consider the operator c\s — 
Es,mGsCn,m|n)(m|. Sluce c\s can be written as c\s = g"~''|^/'s)(V'sl with |^/;s) = Eres'^'^VV?""''!*): 
normahzation of j-^s) leads to l^/is) = Vy^/VT^' iV's) and we obtain c|s = |S'||V's)(?/'s|- Hence the 
eigenvalues of the block c\s are (15*1, 0, . . . , 0) and again the block is singular. The only possibihty to 
obtain a non-singular block is that at most one member of the coset of L in F^" is in £, i. e. |5| = 1. 
Hence, if the code is non-degenerated, C- is the identity matrix. □ 

If we want to correct the set £ = {Ei G V^] wt{Ei) < t} containing error operators of weight < t, the 
stabilizer code has to be at least of distance d > 2i + 1. Let us first give a simple rule to calculate the 
distance d of a given stabilizer code. 

Corollary 6.2.7. The distance d of a stabilizer code is the minimum weight of the elements in \ L. 

Proof. It follows from lemma 16.2.41 and definition 16.1.41 that for a stabilizer code of distance d, each 
error operator E £ of weight less than d is either in S or does not commute with some M £ S. This 
statement is equivalent to each of the following statements and to the corollary itself: Each e £ F^" of 
weight less than d is in L U (F^" \ L"*"); In L-^ \ L is no element of weight less than d; □ 

Now we state a quantum Gilbert Varshamov lower bound on the rate of 9-ary stabilizer codes of 
distance d. 



tHere the weight of an element eG F^" is defined as the weight of XZ{e). 
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Theorem 6.2.8 (Gilbert Varshamov bound for stabilizer codes FMOj|). Suppose n>k>2, d>2 
and n = k (mod 2). Then there exists a stabilizer code of distance d encoding k qudits into n, provided 
that 



d-1 



g2- 1 



> 



(6.24) 



Since the proof i s more sophisticated, we refer to the original work [FMOj|. A weaker bound is given in 
KKKSOel ( and |MU02t for the binary case). Note that the bou nd found for the binary case in [EM96l | 



GotQTI . chapter 7.1] has been c riticized (see e.g. HNO03|). An asymptotic version of the above 



and 

bound was known previously [AK01| 



Corollary 6.2.9 (Asymptotic GV for stabilizer codes AK01|). For large n, there exist stabilizer codes 
of distance d encoding k qudits into n, such that 



n 



2H, 



d 

1- 



d/n 



d/n 



(6.25) 

n 5^ - i gr^ - i / 

Proof. Using the Chernoff bound [1 . 2 . 1 1 f as it was done in proving the asymptotic limit of theorem l5.2.2p . 
this corollary follows from theorem 16.2.81 □ 



Remark. For qubits {q = 2) the asymptotic bound becomes CRSS97l | Pre98l chapter 7.14] 

k f d\ d , 

- > l-i^2 - --log23. 

n \nJ n 



(6.26) 



6.2.4 Recovery Operation 

For stabilizer codes Knill and Laflamme's criterion for reversibility of a quantum operation .A on a 
codespace C leads to lemma 16.2.41 and corollary 16.2.51 telling us what kind of error subsets 8 C 
might be corrected by a certain stabilizer code. We are now going to write down the recovery operation 
which achieves the desired correction of such an error subset. 

As discussed in the last subsection, the cosets of L-^ in F^" can be labeled by a syndrome vector 
s G F^"'' such that Si = {gi,v)sp, where v is an arbitrary member of the corresponding coset. Let us 
construct a set of coset representatives (a transversal) Jq by choosing a vector Jo(s) from each coset s 
of L-L in F2", Jo = { Jo(s)|s e FJ-'^}. The error subset J = Jo + L C F^"! can obviously be corrected: 
Using figure [6721 Jg by construction has the property that each of the rows in the figure contains exactly 
one of its elements. Now we can easily write down the recovery operation which reverses all quantum 
operations A with support on J on the codespace C(L, sq): 



E 

tew"-' 



XZ^Mt)) Ilc^L,so+t) Ap) T^ciL,so+t) XZ{Jo{i)) = P e S[C{L, so)). (6.27) 



To generate this tpcp-map, we could first measure the syndrome sq + t, thereby projecting onto the 
codespace C{L, sq + 1). Afterwards we apply the Pauli-operator XZ\Jo(t)) to go back into the original 
codespace C{L, sq) and to undo the remaining logical error. Note that a stabilizer code correcting Jo is 
non-degenerate, but becomes degenerate when correcting J. 

6.3 CSS Codes 



CSS codes are constructed from two classical linear codes C i and C2 such that C2 ^ Ci. They have been 
developed independently by Calderbank, Shor and Steane CS96 : Ste96| in 1996. Since CSS codes also 
form a subclass of stabilizer codes, we will start the description of these codes from this point of view, 
and establish the connection with the classical codes later on in this section. 

tA + B = {a + b\a & A,b & B} 
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C-2. = span{g} 
Ci = span{^f 



9 



= span{g} 
= span{^f 



(a) CSS code in stabilizer notation 



(b) CSS code in 'CSS-notation' 



Figure 6.3: (a) CSS codes form a subclass of stabilizer codes: For the first n — k\ generating elements 
g = (gf , . . . ,g^,gi, . . . ,gn), the x-part of the vector is 0, while for the next k2 generating elements, the z-part is 
(fc = fci — fc2). An extension to a hyperbolic basis can be chosen which shows an analogous structure, (b) Since 
each of the vectors in F," becomes effectively a vector in , we refer to these n-dit vectors as indicated in the 
figure. Using the definition of a CSS code by the means of two classical codes C2 C Ci, the relations between 
these codes and the n-dit vectors is shown on the right. 



Definition 6.3.1. CSS codes form a subclass of stabilizer codes in which the generating elements of the 
stabilizer L = spanj^i, . . . , (7„_fe}, cfi G F^", have either a vanishing x-part {g — (0, . . . , 0, , . . . , g^), 
z-type g) or a vanishing z-part {g = {g'f, . . . , g^, 0, . . . , 0), x-type g). Setting k = ki — ^2, we will use 
the convention that the first n — ki generating elements are z-type vectors, while the next ^2 generating 
elements are x-type vectors. 

6.3.1 Encoding Operations 

As discussed in the last section, an encoding for a stabilizer code L is specified by an extension of the 
generating elements {gi, . . . , gn-k} of L to a hyperboHc basis {gi, . . . , gn,hi, . . . ,hn} spanning F^". The 
elements of a hyperbolic basis obey relations (|6.7p . i.e. vanishing symplectic inner products between 
any two 5's and any two /I's, and non-vanishing inter inner product: {gi,hj)sp = Sij (compare with 
figure [6rT|l . According to their definition, the generating elements of CSS codes are of x-type and z-type 
only. Considering possible extensions to hyperbolic bases for such codes, it turns out that it is always 
possible to find extensions which have the same x-type/z-type structure. For example the first n — ki 
vectors {hi, . . . , hn~ki } have to be x-type vectors in order to fulfill {gi, hj)sp = Sij, since the first n — ki 
generating elements are z-type vectors. The detailed form of such extensions is shown in figure I6.3al 
This means that a CSS code plus an encoding is effectively specified by 2n vectors in F^. Each of these 
n-dit vectors is given a unique notation as indicated in figure I6.3b[ e. g. the first n — ki generating 
elements gt £ F^" (which are z-type vectors) are denoted as € F^ now {gi — (0, ^f)). The basis 
{gi,...,g„; ft-i, /i„} becomes 

{Cl ; ■ • ■ 7 Cn-fei J ; ■ • ■ ; Cfc2 I Ml; ■ • ■ ; MfeJ ■ • ■ i V^-ki i ^1 i ■ • ■ i Vk2 ' /^l ' ■ • ■ ' A^fe } (6.28) 

in the new notation. Since both notations are equivalent, occasionally we will use them simultaneously. 
The three relations (|6.7p a hyperbolic basis has to fulfill, translate into nine relations the rt-dit vectors 
(|6.28p have to fulfill. Regarding the n-dit vectors as row-vectors, we can put these nine relations into 
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one single equation: 



\ 



1 {) ■ 

(I 1 



■ 
(J I) 



■ 




I) ■ 
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1 {) ■ 
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1 ■ 

1 



(6.29) 



It follows that the two matrices which are multiplied above, cannot be singular. This fact is equivalent 
to 



and 



span{^i, . 
span{ry^, . 



■ ' Sn— /ci ; '/1 1 ■ 

■ 7 'In—ki 5 SI 1 ■ 



(6.30a) 
(6.30b) 



respectively. 

As it is mentioned in the beginning of this section, the original construction of CSS codes makes use 
of two classical codes C2 Q Ci. Let Ci be an [n, /cijg code code encoding fci dits into n, and C2 be an 
[n, k2\q code with fc2 < fci- Then the CSS code which is constructed using these classical codes, plus an 
encoding, is specified by the two lists of vectors. 



1 'ln~ki 



, fll} and 



fcj and C2 = span{Cf,...,^^J. 
while Ci has to be spanned by 



both spanning and satisfying (|6.29p . where ~ spanj^J", . . . 
It follows that C2 has to be spanned by {Ci^, A^j }ie{i...n-fci} j"e{i...fc 
{C>A^J}»e{i...fc2}j6{i...fc} in order to satisfy (|6.29p. 

Keeping in mind that a CSS code together with a corresponding encoding operation is fully spec- 
ified by the two sets of n-dit vectors in equation (|6.30p and by a set of phases {9a{i) G {uj'^'\r E 
^q}}ae{x,z},ie{i...n}, wc are now going to explicitly construct the q'' encoded basis states for all 
codespaces using the definition of the encoding operator f/enc given in (|6.1ip . First, we have to find the 
common eigenvector of the set {.^i}je{i....,ri} of encoded Z-operators with eigenvalue list (lj*^, . . . , w"). 
Let us set the phase factors Oz{-) and Ox{-) equal to one, i. e. we use the encoded operators Zi = XZ{gi) 
and Xi — XZ{hi) for i £ {1, . . . , n]. The only X-operators in the set of encoded Z-operators are those 
constructed from elements spanning C2. Hence, the state 

rTToy^^^l?) (6.31) 



is certainly a common eigenstate of these operators with eigenvalue -1-1. It is also a common +1 eigen- 
state of the Z-operators in {Zi}, since all these operators are generated by elements of C^. Applying 
the {Xj = XZ(/ij)}jg{i „}-operators onto the state |0. . .0) constructs all encoded states: 



|x, z, c) 



x^^~-'-%. 




where the vectors y, 3 and c are given by 



n 



ki 



k-2 



k 

and c — ^ Cifl'l 



(6.32) 



(6.33) 



110 



6.3 CSS Codes 



The basis of the g'^-dimensional code space C{L, s) with syndrome s = {x, z) is given by the orthonormal 
set of states {|x, i*, c)}g'gFfc. 

As it was mentioned in section [6.2.21 any vector a e F^" can be expressed as linear combination of 
the basis elements of a given hyperbohc basis {gi, . . . , gn,hi, . . . ,hn} of F^", 

a = «, . . . , a^, 4, . . . , aj;) = (a"^, a^) 

""'^ ^ ^ (6.34) 

i=l i=l 

where Si = {d,gi)sp etc. Taking into account the special structure of such a basis in the CSS case (i.e. 
the fact that gi = (0,£,i) etc.), the x- and z-part of a can be decomposed separately, 

n—ki k2 k 

= E ^'^^ + E ^^"^ + E (6.35a) 

i—1 i—1 i—1 

n—ki k2 k 

a' - E + E '^"f^ + E ^^^A^^ (6.35b) 

i—1 i—1 i—1 

where s = (s*,s*), n = {fi^,n^) and e.g. si = {gi,a)sp — £,i ■ — sf, et cetera. Analogous to lemma 
16.2.31 expression (11.25P gives the next lemma. 

Lemma 6.3.1. Any Pauli operator XZ{d G F^") £ can be expressed (up to a phase) as product of 
some powers of the operators XZ{rff,6), XZ(|j, 0), XZ{flf, 0) and XZ{6, ), XZ{6, rf^), XZ{6, flf), 

n — ki k2 



xz{d)^ n (^^('?r,o)^'Xz(o,c;^)<)n(^^(o,'?f)^'^^(^r,o)"?) 

k 

\{{XZ{^f,,QfxZ{0,fllf), (6.36) 



or by using the operators Zi^Xi as defined in (j6.8p , 

n~ki k2 k 



U(^^'^^nUnn-k;^U^k:}l[(^tn-An-k) = '^Z^— '\ (6.37) 



j^i- -II ^ _ —{r.r,n-{n^M',n 

i—1 i—1 i—1 

where the strings s^,s^,l^ and n^,n^,l^ are defined by (j6.35p . 



6.3.2 Correctable Errors 

Corollary 6.3.2. The distance d of a CSS quantum code constructed from classical codes C2 ^ Ci is 
given by 

d = min{wt(c) I c e (Ci \C2) U {C:^\C:t)}- (6-38) 

Proof. According to corollarv l6.2.71 the distance of a stabilizer code is the weight of the lightest element 
in L-^\L. As can be seen in figure [673bl the weight of the lightest non-zero element in L-*- is the minimum 
distance of Ci and since Ci = span{^f,^J}, — span{^f,^|} and — span{(a, 0), (0, 6) | a e 
Ci,b £ €2}. It remains to subtract L — span{(a, (J), (0, 6) | a G C2, 6 G Cj'-}. □ 

Theorem 6.3.3. There exist CSS codes of distance d encoding k qudits into n such that (for large 
enough n ) 

k / d din din \ , ^ 

- > l-2i/,po ](l--,^,...,^ . 6.39 
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Proof. In chapter IC.2[ a Gilbert- Varshamov lower bound for self-orthogonal codes is established. It 
guarantees the existence of [n, n — k, d]q codes of rate 

n — k / d din din 
> 1- H, ' ' 



9pogJ l--,^,---,^ 6.40 

^ V n Q — \ 0—1/ 



n q — 1 9 — 1 

such that C C C^. A CSS-code constructed from such a code encodes fc = /ci — ^2 = (n — k) — k qudits 
into n. Hence its rate is given by (|6.39p . □ 

For CSS codes a transversal Jq for the cosets of L-^ in F^" can be specified by fixing a transversal Fi of 
F^/Ci and a transversal Fa of F^/C^. Then, 

Jo = {XZ(a^, d'-) I e Fi, d' e F2}, (6.41) 

and the correctable error set J = Jq + L is given by 

J = {XZ{d^, d') I G Fi + C2, e F2 + C^}. (6.42) 

6.4 Concatenated Codes 

If a quantum register corresponding to a certain set of qudits is encoded using a stabilizer code, the 
resulting qudits may be encoded once more using some other stabilizer code. Equivalently, such a 
twofold encoding process may be considered as a single one, encoding the initial register only once using 
a so-called concatenated stabilizer code. We will call the code which is used first the outer code and 
the code used for the second encoding the inner cod^. This section examines how such a concatenated 
code is obtained from its two subcodes. 



6.4.1 The Outer Code 

The stabilizer code used in a twofold encoding process to encode the qudits before the second encoding 
is applied is called the outer code. Let the outer code encode K qudits into N and let its stabilizer 
be spanned by {Gi, . . . ,Gn-k}- As discussed in section [B. 2. 2 [ any extension 

{Gn~k+i, ■ ■ ■ , Gn, Hi, . . . , Hn} 

of the generating elements of to a hyperbolic basis of F^^ together with a set of phases {Qaii) G 
{uj^\r g Pq}}a(£{x.z}.i<£{i...N} defiucs a unitary encoding operation [/°"* as follows: 

where |0...0)q^^ is defined as the common eigenvector of the operators {^out,j}iei...Af with all the 
eigenvalues equal to lu^, and the Xout,i and Zout.i are defined as 

Xont,^ = Qx{i)XZ{Hi) (6.44a) 
^out,^ = e,(i)XZ(G,)- (6.44b) 

The encoding operator {7°"' as defined above has the property of mapping the Pauli operators X" and 
onto their encoded versions ^^^t and Z^^^ (see (|6.13p '): 

C/™*X*^C/™*^ = C/°"'Z"[/°"*^ = (6.45) 

§Some authors label the codes the other way round making the first code the inner code and the second code the outer 
code. 



■/3. 

out, 2 
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6.4.2 The Inner Code 

Imagine we would like to encode the N qudits resulting from the application of [/°"* once more, this 
time using a stabilizer code encoding k qudits into n. We will call the stabilizer code used for such a 
second level encoding the inner code. Then the N qudits have to be partitioned into groups of size k 
(we assume that N is divisible by k) , and the encoding operation [/"^ of the inner code has to be applied 
to all of these groups. Let the stabilizer of the inner code be L"^ — spanjgi, . . . , gn-k}- As it is the case 
for the outer code, any extension of these vectors to a hyperbolic basis {gi, . . . , gn, hi, . . . , hn} of F^" 
together with a set of phases {6a{i) £ {Lu'^\r S ^q}}ae{x,z},ie{i...n} specifies an encoding operator J7'". 
The set of expressions (|6.43p . (I6.44p and (|6.45p applies if the token 'out' is replaced by 'in'. 

6.4.3 The Concatenated Code 

As a result of such a two step encoding procedure, K qudits have been encoded into n = N/kx n. We are 
interested in the unitary encoder [7^=°" of the concatenated code. For given encoding operations [/°"' and 
U™ derived from corresponding hyperbolic bases as described above, can we construct a corresponding 
hyperbohc basis, let's say {qi, . . . , g^, t)i, . . . , f)n}, of F^" that specifies 1/'^°'^ ? Let us denote the initial 
state of the N qudits which are going to be encoded first by C/°"* by \l3l . . . Pi , ... , P^^'^ . . . (3^^'') 
and let us label the first group of k qudits by Si, the second group by B2, et cetera. Before the inner 
encoding is applied, additional n — k qudits have to be added to each of the groups B^. Let us label the 
n — k qudits added to Bi by Ai and let them be in the state \a\ . . . a^_^). Then, the inner encoding 
operator is applied to each of the sets Ai U Bi and the total encoding procedure can be viewed as 
applying the single operator 

C^AB = ® ■ ■ • ® C^i^Siv/ J ■ {A^U,A,B^U,B,), (6.46) 

describing the encoding of the concatenated code, to the state 

11 1 ol al 2 2 o2 o2 N/k N/k oN/k oN/kx ,„ 

I ai .. .Q„_fc , /3i . . .a,,^^ , .. . ; a/ . aJ_^ , Pi . . ^.(3^' J . (6.47) 

Ai Bi A2 B2 Ajv/fc Bjv/fc 

A quantum circuit depicting the situation (for j/S^ , . . . , P^^'') = |0 . . . 0, 'Si, . . . , and |q;*) = |0)) is 
presented in figure 16.41 

We are now going to determine the elements of the hyperbohc basis {gi, . . . , 0n, f)i, • ■ • , ^n} of F^" 
that specifies J/"™ by calculating the operators {Xcon,i ~ XZ{i)i), Zcon,i ~ XZ{gi)}i^i,,,„ using (|6.45p 
and the corresponding expressions for the inner and the concatenated code. Before we proceed, let 
us define a map with parameter j S {1, . . . ,N/k} mapping a string a — {a^,d^-) £ F^" to a string 
a= (a^,o^) e F2" by 

Ff 3 d<^a^^^ = a e Ff , (6.48) 

where 0^ = (0, . . . , 0, a^, 0, . . . , 0) contains in position j and is defined analogously. Let i E 
{1, . . . , 71 — k}, j E {1, . . . , N/k} and let the entries of u G F^^*^ be given by Ug = Sg^i- Then, 

rrcon 7-7-cont 

^con,(j-l)(n-fc)+i -^Aj '-' 

= [U'Zb, ®...]-UT X% ■ [UZb, ® . . . ]t 
= [UZb,®---\X%[UZb,®---\'^ 
= UajB, ^a, U'a^b. ^Iabma^b,} 

= 0j:{i)XZ{hi)AjBj '^lAB\{A,Bj}, 
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|0>i 

|0>2 



N -K{ 



K < 



\0)n-k- 
|*i>i- 

|*x>/f- 



|0) 
|0> 



|0) 

|0) 



|0> 
|0) 



Ai jn-k 

bA k 



B2 



■■A 



N/k 



■ B 



N/k 



Figure 6.4: Quantum circuit of the encoder of a concatenated quantum code. First the outer code is apphed 
which encodes K data qudits into N qudits after adding the state |0)®'^~^. Then the inner code encodes k 

qudits into n after adding N/k x {n — k) additional qudits prepared as |0) (wc assume that N/k is an integer). 
Altogether the concatenated code encodes K logical qudits into n = N/k ■ n physical qudits. 



and essentially the same calculation for Zcon,{j-i)(n-k)+i leads to the conclusion that 

= (6.49a) 

Q(3-i)(n-k)+i = 9i'^ ■ (6.49b) 

To determine the remaining 2N elements of the hyperbolic basis let i G {!,..., and let the entries 
of u e be given by Us = Sg^i- Denoting the entries of Hi = (i?f , H^) as 

Hr = {{Ht)\ . . . {Ht)l, . . . , {H^)T . . . {HffJ'') 



= ((fff )1 . . . (fff )L . . . , (fff )r • . . (fff )f'=) , 



we obtain 

-^con,n— AT+j 



jjcon j^u jjcont 
N/k 

= e.(i) (g) uXb, XZ{{H^){ . . . {Hf)l {H!){ . . . {H!)i)^^ u'^l^^ 

3 = 1 

N/k k 



e,(2) (g)(n [Ox{n -k + s)XZ{hn.k+s)] ■ [Oz{n -k + s)XZ{gn. 

i = l 8=1 

N/k k 

Xz(j2{iH^)i ■ hn-k+s + {HDi ■ 9n-k+. 



-k+a 
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2n 



2n 



51 



at 



9i 



gu-k 



9n-k 



3t 



9„-k 



9t 



9n-k+l 



9n~k 



9n-k 



(a) inner code 
2JV 



9t 



9l 



9„-k 



9„-k 



(b) outer code 













flfl 



(c) concatenated code 



Figure 6.5: An inner [[n, k]]q code is concatenated with an outer [[A'^, K]]q code resulting in an [[n, K]]q code 
with n — N/k X n (we assume N is divisible by k). If the inner code plus an encoding (7'" is specified by the 
hyperbolic basis {gi, . . . , Qn, hi, ... , /i„} (upper left part) and the outer code plus an encoding f/°"' is specified 
by {Gi, . . . , Gn, Hi, . . . , /ijv} (lower left part), the resulting concatenated code plus an encoding (7™" is specified 
by {gi, . . . , gn, f)i, . . . , f)n} (right part) which is related to the bases of the inner and outer code via equations 
(fO^ (for (0i,^i)> j G {l,...,n- A}) and ((630)) (for (g^.^O, * £ {n - iV + 1, . . . , n}). In the figure, only the 
first half of the bases (i. e. {^i, . . . , gn\, etc.) is shown. 

and again essentially the same calculation for Z con,n~N+i leads to the conclusion that 

N/k k 

= E E((^ni • hl^h+s + ■ al^L+s), (6.50a) 

j=l s=l 
N/k k 

gn-N+^ = E E ((^ni • h^;!lk+s + iG-)i ■ glilk+s) ■ (6.50b) 

j=l s=l 
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Shannon's noisy coding theorem is one of the fundamental theorems of classical information theory. As 
discussed in chapter [51 it assigns to each channel a non-negative number C, called channel capacity, 
such that for any rate below the capacity, there exists an error correcting scheme achieving reliable 
transmission over the channel. The channel capacity is given by the maximum mutual information 
between source and receiver and the theorem is proven by showing that typical set decoding using 
random linear codes leads to an arbitrary small decoding error probability. This chapter deals with the 
quantum analog of Shannon's noisy coding theorem. 

It wa s not until Shor presented a nine qubit quantum error-correcting code in his seminal paper 



Sho95l | , that it was known whether there exist error correction methods for quantum information at all. 



In the same paper, Shor stated that the ultimate goal would be to find a quantum analog of Shannon's 
noisy coding theorem, i. e. to define a quantum analog of the Shannon capacity for a quantum channel, 
and to find encoding schemes which approach this c apacity. About a year later the demanded quantum 
noisy c oding theorem was proposed by Lloyd |Llo97| . As it was conjectured by Schumacher and Nielsen 



SN96l | , the role analogous to that played by the mutual information in the classical theory is taken by 



the regularized coherent information, which corresponds to the limit of the coherent information as the 
number of channel uses goes to infinity. A rigorous proof that the quantum capacity is upper bounded by 
the regularized coherent information was given by Barnum, Nielsen and coworkers in BNSQSl : IBKNOO| | . 
while the converse part (the c apacity is lower bounded by the reg ularized coherent information) was 
shown by Shor himself |Sho02l | (unpublished) and Devetak [Dev05|. 

While the Shannon capacity of a classical channel is given by a formula involving a single use of the 
channel, the quantum capacity involves the limit as the number of channel uses goes to infinity and 
cannot be expressed by a single letter formula. Therefore, the computation of the quantum capacity 
for a given quantum channel remains to be a hard problem and is not feasible in general. To obtain 
at least a lower bound on the quantum capacity, one may calculate the achievable rate of the so-called 
one-way hashing entanglement distillation protocol by Bennett etal. BDSW96| . which corresponds 
to a quantu m error correcting scheme making use o f random stabilizer codes (see Got 9 71 section 7.6] 
and Pre98l . section 7.16.2] for the binary case, and Ham02al l for the general one). The fact that the 



'hashi ng'-rate is indeed only a lower bound on the quan tum capacity was shown by Shor and Smolin in 
|sS96l l (and later together with DiVincenzo in [dSS9^). By concatenating an outer random stabilizer 
code with a deterministic inner one, they found that rates above the hashing rate could be achieved 
for very noisy depolarizing qubit channels. This result came somewhat as a surprise since it stands in 
contrast to the classical case where random codes do achieve the capacity of a channel. 

In section rm we define the quantum capacity of a noisy quantum channel and present the quantum 
noisy coding theorem, i. e. the representation of the capacity in terms of the regularized coherent 
information. For the remaining part of the chapter, we restrict our attention to a certain subclass of 
quantum channels, so-called memoryless Pauli channels. As it is discussed in section [7.21 this kind of 
channels are especially easy to analyze and allow us to obtain lower bounds on the capacity of general 
channels. We present the quantum coding scheme based on random stabilizer codes and corresponding 
to the one-way hashing protocol in section 17.31 In addition we give a rigorous proof th at the hashing- 
rate can be obtained by using only CSS codes, a result which has been used by Lo in LoOl] to prove 
the security of the 6-state quantum key distribution protocol, but for which no el aborated proof can be 
found in the literature. Concatenation of random codes with deterministic ones |SS96l : lDSS98t allows 
for rates surpassing the hashing-rate under certain circumstances. We determine the achievable rate 
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of such concatenated coding schemes in section 17.41 Eventually we apply the results of the preceeding 
sections to calculate new lower bounds on the capacity of the qubit depolar izing channel i n section [7751 
After giving a detailed description of the deterministic inner code used by [oSSgi; IsSO^ , we evaluate 
the achievable rate for this code for larger code sizes than it was done before in SS07 



7.1 Quantum Noisy Coding Theorem 

A quantum channel is a trace preserving complete positive map (tpcp-map) Ai : S{Ti.) —>■ S{Ti.) map 
between density matrices on a Hilbert space Ti.. In this thesis we are primary concerned with discrete 
Hilbert spaces of dimension q. To send quantum information reliably over a noisy quantum channel, 
one might protect it by encoding it into a quantum error-correcting code C C Ti®", which encodes say k 
qudits into n. The rate at which we send quantum information in this case would be given by the ratio 
k/n. To quantify how good the protection works, we may use the minimum pure-state fidelity which is 
defined for a quantum channel A4 and a quantum code C with corresponding recovery operation TZ as 



Fp(C,7^7W®") = min(?M7^(7W^"(|^A)(V'l))IV')• 

\i>)ec 



(7.1) 



The capac i ty of a quantum channel for transmitting quantum information was defined by Bennett et al. 
BDSW96I : IbDS97I : IPSSQSt with the help of the minimum pure-state fidelity as follows: 



Definition 7.1.1. The quantum capacity Q{M) of a quantum channel Ai : S{H) S{T-C) is defined 
as the maximum number Q, such that for any rate R < Q and any e > 0, there exists a quantum code 
C with rate k/n> R, together with a recovery operation TZ, such that 



Fp(C,7^>l®") >l-e 



(7.2) 



Remark. There exist quite a lot of different definitions for the quantum c apacity. For example, the 
minimum pure-state fidelity might be replaced by the entangl ement fidelity BKNod l . As it turns out, 
all these definitions are equivalent. For an overview see KW04| : 'Tema con variazioni: quantum channel 
capacity'. 



The question raised by Shor in his seminal paper on quantum error correction Sho95l | was whether 
there exits a quantum analog of Shannon's noisy coding theorem relating the quantum capacity of a 
quantum channel to a quantity corresponding to the m utual i nformation in the classical theory. Such a 
quantum noisy coding theorem was proposed by Lloyd Llo97l | . The quantity taking the role the mutual 
information played in the classical case is taken by the coherent information, which is defined for a 
quantum channel M : S(Ti.) —^ S{Ti.) and a quantum state p € S{Ti.) as 

Ic{p,M) = S{M{p)) - S{M^imm, (7.3) 
where G 7i is a purification of p. 

Tiieorem 7.1.1 (Quantum noisy coding theorem). The quantum capacity Q(A4) of a quantum channel 
Ai : S{Ti.) S{Ti.) is given by the regularized coherent information, 

I 



Q{M)= lim -max/c(p,7W®"), 



(7.4) 



which is obtained by taking the limit as n goes to infinity of Ic{p,M'^")/n maximized over all density 
operators on Ti*^". 



It was proved rigorously by Barnum, Nielsen and coworkers in BNS98I : |BKNOO|, that the regularized 
coherent information is an upper bound on the capacity Q{Ai), while the other direction of the theorem 
{Q{A4) is lower bounded by the reg ularized coherent information) was shown by Shor himself Sho02l . 
(unpublished)] and Devetak DevOd | . 
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7.2 Pauli Channels 

In this section we consider a special class of tpcp-maps called Pauli channels. Pauli channels have the 
nice property of being easy to analyze. In addition, any more general channel may be converted into a 
Pauli channel by a process called discrete twirling. This allows lower bounds on the capacity of Pauli 
channels to be applicable to more general channels as well. 

In the first subsection we give the definition of a Pauli channel. The subsequent subsection explains 
how a general channel may be twirled to become a Pauli channel. 



7.2.1 Definitions 

Definition 7.2.1. A Pauli channel A : S{Ti.) S{H) is a tpcp-map between density operators on a 
g-dimensional Hilbert space Ti. given by 

A:p^ A{p) - XZ{e)pXZ{e)^ (7.5) 

for some probability distribution on F^. 

If we speak of a memoryless quantum channel, we mean a channel acting identically and independently 
on multiple qudits. For example, a memoryless Pauli channel A®"^ : S{H^'"') 5(7i®") between 
density operators on Ti*^" is given by 

A'^^^-.p^ ^«"(p) = P^i^ XZ{e)pXZ{e)\ (7.6) 

where P^{e— (e^, . . . , e^, ef , . . . , e^)) = 11"= i -^(^f ' )■ contrast to l|7.6p . a general Pauli channel 
G ■ 5(7i®") 5(7i®") is defined by a probability distribution Pg on F^" which is not necessarily a 
product distribution. 



7.2.2 Discrete Twirling 



We follow HamOSl . section 2.3-2.5]. First we note that there is a one-to-one map between a complete 
positive map M : SiH'^"') 5(7^*^") and a non-negative operator pM in S{H'^"' ® H*^") defined by 

PM = [I ® Mms)i'^s\l (7.7) 

where denotes a Bell state (compare with definition II. 2. 8p . Let an operator sum representation of 
A4 be given by : p i— > M^pM^. Then, by comparing the expressions 



Pm 



= E \^y){'^y\PM\<f^)m 



^ E \^AA0\^ E rny^,zXZ{y)s\t}s^{j\XZ{z)l (7.1 



and 



Pm^\Y. ® E M^\i)j,s{]\Ml, (7.9) 



it follows that any M : 5(7^*^") — > S{H'^"^) may be expressed as 

M:p^ E mysXZ{y)pXZ{z)\ with m^- = ($^-| [I ® A^](|$5)($5|)I$?)- (7.10) 

i?,2eF2" 
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Discrete twirling ( [HamOat . |BBP+97I : [BDSW9d | for the binary case) converts the state 



s(n^"®n^^)3 PM^ ^v.^\%-)i'^s\ (7-11) 

into a Bell diagonal one by applying one of the bilateral rotations {XZ{x)* (>^XZ{x)\x G F^"} (* denoting 
complex conjugation) at random, 

PM^4^, J2 {xzix)* (g> xzix))pM{xz{xy (g> xzix)y 

= 4r E ^y-?(2:'^^^(2^)XZ(y)XZ(f)t)|$g)($g|(X®XZ(.f)XZ(z)XZ(f)t)^ (7.12) 

To arrive at (|7.12p we made use of lemma IC.3.11 We obtain from (j7.12p that 

= ^ 4r E ^sMM^] (l^oX^H), (7.14) 

with Afg : p 1-^ XZ{x)pXZ{x)\ which leads to the central theorem of this subsection. 

Theorem 7.2.1. Any completely positive map M. : 5(7^*^") S{Ti.'^^^) can be converted into a general 
Pauli channel M : S{n'^'') S{n'^'^) such that 

■ ^ 4r E ^sMMlip) - Y PM{^XZ{e)pXZ{e)\ (7.15) 

with Pm{(^ = ms^s = ($eH[2:® A^](|*oX*ol)l*e)• 
To obtain a lower bound on the quantum capacity of a general memoryless channel A^**" : 5(7^**") 
SiTL'^^), we apply twirling to convert the channel into the memoryless Pauli channel A^**" : S{'H^^) 
iS(7i®"). Hence, any lower bound for A^**" is automatically a lower bound for Al*^". 

Remark. Let an operator sum representation of A4 : 5(7Y) S{'H) be given hy Ai : p t-^ J^fj. Mf_ipMj^ 
with Mf_, = J^w'',^ afi,w''.w-XZ{w'',w^-). Then, 

PM(e1 = ($eH[I®Al](|*oX*ol)l*e) 

which coincides with the definition of a probability distribution on of a general memoryless 



channel in Ham02bl . section II] 



7.3 Lower Bounds on the Capacity of Memoryless Pauli Channels 

A low er bound on the quantum capacity of a binary memoryless Pauli channel was found by Bennett 
et al. |BBP+96I | by constructing the breeding entanglement distillation protocol. Imagine two distant 



parties, say Alice and Bob, who would like to share a set of maximally entangled states, are connected 
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only via a noisy quantum channel. If Alice prepares a set of maximally entangled bipartite states 
and sends Bobs half through the channel, they end up sharing a set of imperfect maximally entangled 
states. The task of an entanglement distillation protocol is now to distill a smaller set of (nearly) 
maximally entangled states by means of classical communication and local operations only. Since the 
breeding protocol has the need for some prc-distilled maximally enta ngled state s, a revised version of 
this protocol, the so-called one-way hashing protocol, was proposed in IBDSW96I. Both protocols make 
use of one-way classical communication only and are therefore equivalent BDSW96| to a scheme where 
Alice uses a quantum error correcting code to protect Bobs half of the smaller set of perfect states 
during transmission over the noisy quantum channel. 

In the first subsection, the quantum error correcting scheme (generalized to qudits) corresponding 
to the one-way hashing ent anglem ent distillation p rotocol is presented. It corresponds to th e use of a 
random stabilizer code (see Got97L section 7.6] and PreQSl . section 7.16.2] for the binary case, Ham02a | 
for the general one). The achievable rate of this scheme is a lower bound on the quantum capacity of 
the memoryless Pauli channel (the quantum capacity is by definition the highest achievable rate). In 
the second subsection it is shown that the same result can be achieved using random CSS codes, which 
is of interest for quantum key distribution since entangl ement distillati on protocols based on CSS codes 
are reducible to prepare and m easure QKD schemes ([SPO^; lHam06l ] , subsection I8.1.2p . In fact this 
result was used by Lo in LoOlj to prove the security of the 6-state protocol. 



7.3.1 Random Stabilizer Codes 

In this section we prove th e following theorem due to Got97 . section 7.6] and Pre98l section 7.16.2] 



(binary case) and Ham02al ] (general case). 

Theorem 7.3.1. Let A : S 

let e > 0. Then, as long as 



Theorem 7.3.1. Let A : S{'H) S{Ti,) be a Pauli channel with probability distribution P_a on ano 



k 
n 



< l-i/,2[i„g^](P^), (7.17) 

and for large enough n, there exists a stabilizer L of dimension n ~ k such that for any corresponding 
stabilizer code C(^L,gj, there exists a recovery operation 'R-{S) with minimum fidelity 

Fp{C^L,^,n^^A^") = min (^]7^(,~)(^«"(]V)(^]))]V') >l-e. (7.18) 



Remark. Ham02aj shows the following stronger result: Let integers n, k and i? e K satisfy < fc < Rn 
and < i? < 1. Then, the minimum fidelity of (j7.18p is at least 

l-(n + l)2(9'-i)(7-"^(^-^-^), (7.19) 

where the random coding exponent E{R,P_a) stays positive as long as i? < 1 — i/g2[iog^](i^). The proof 
of the stronger statement is more elaborate than the simple proof of theorem 17.3. 11 which uses typical 
set decoding as in section [531 

Before we start with the proof of theorem I7.3.1[ we need the following lemma. 

Lemma 7.3.2 (Lemma 6 of Ham02b| ). Let the set of all stabilizers of dimension n — k be given by 
An,k = {Lc i^j^" ] L is linear , L C L-^ ,dimL = n - k} (7.20) 

and let 

AnM^) = {Le A„,fe \xeL^\{6} }. (7.21) 

Then, ]/4„.fe(0)] = and 



\An,k{x)\ 



< 



(7.22) 



for any nonzero x G 



2ri 
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Proof of theorem \7.3.1\ For fixed n and k, we pick a stabilizer L e A„^fc and encode k qudits into one of 
the codespaces C{L, s) labeled by s S F^~'^. We apply the definition 1 5. 4. II of a typical set to the random 
variable X taking on values (e^, e^) S according to the probability distribution Pj^ on F^: 



T]^ = {e = ^) e IFf s. t. for every (e^ e^) G 



|iV((e^e^)|eO-nP^(e^e^)| < (7.23) 



For a given stabilizer L, we construct a transversal J(-L) for the cosets of in F^" according to the 
following rule: If a coset contains exactly one typical vector e £ T^, then add this vector to J{L), 
else pick the corresponding representative at random. A recovery operation TZ(j(l),s) which corrects an 
error set like J{L) was defined in subsection 16.2.41 As a consequence of J{L) being a transversal, our 
code will be non-degenerate. The minimum fidelity of our coding scheme, 

^i(C(i,.^,7^(J(i),,^^«") = min {m(J(L).s)iA^''i\m\)m, (7.24) 
will certainly be not less than J2eeJ(L) -^(^^ since the fidelity will be one if e e J{L). In other words, 

'3e e with / e s.t. 



, e — 6*)^^ = for 1 < i < n — fc 



(7.25) 



The first sum is upper bounded by A ^ XjiS^n) (part b of tlicorcm l5.4.ip and tlie latter by 

s. t. e'^e 

E ^^(^ E ^[(5*' ^" ^^'v = for 1 < i < n - /c] . (7.26) 

Therefore, averaging over all stabilizers L e A„^fc leads to 
1 - ^ (1 - F,(C(,.,,-^,7^(,(,.),,^^«"))^^^_^^ 

< A + ^ Pj^'(eO '^"f.^^^^^' by theorem [SXTb and ((7:^ 

e-GT," e-'GT," '^"■'=^1 

< A + [\Tl\ - 1)^'^-" by lemmaEXH 

< A + expg(n(i/g2[iog^](i^) + (5) + fc — n) by theorem l5. 4. lb . 

This quantity becomes arbitrary small for large enough n as long as 

^<l-i/,.[iogj(F^)-5. (7.27) 

Since the above statement holds for any (5, we are free to choose 8 as small as we like. So far we have 
shown that the fidelity averaged over all stabilizers is larger than 1 — e. It follows that there exists 
at least one stabihzer L g A„^fc such that ip(C(i_j), 7?.(j(i)^^^'*") > 1 — e. □ 

7.3.2 Random CSS Codes 

In this subsection we show that using CSS codes instead of general stabilizer c odes is sufficient for 
theorem 17.3.11 to hold, i. e. we prove the following theorem proposed by Lo in Lo01| to prove the 
security of the 6-state quantum key distribution protocol. 
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Theorem 7.3.3. Let A : S{Ti.) — > ^{Ti.) be a Pauli channel with probability distribution P_a on and 
let e > 0. Then, as long as 

^<l-if,2[i„g^](P^), (7.28) 

and for large enough n, there exists a pair of codes C2 C Ci such that for any codespace C(^i^(^Ci.c^).s) 
of the corresponding CSS code with stabilizer L{Ci,C2), there exists a two step recovery operation TZ(^^, 
first correcting the bit errors and then, by using the bit error syndrome to reduce the uncertainty on the 
phase errors, correcting the phase errors, with minimum fidelity 

Fp{C^LiCuC,),s),n^s)A^-^^) - , niin (V|7^(,^(^^"(|V')(V'I))I^) >l-e. (7.29) 

For the proof of theorem l7.3.3l we need the joint- and conditional typical sets from subsection l5.4.21 and 
corollaries IC.1.21 and IC.1.51 from appendix IC.ll 

Proof of theorem \7.3.3\ We apply definition 15.4.21 of a set of jointly strongly (5- typical sequences of 
length n to the two random variables X and Z with joint probability distribution P^ — {i^(x, z) = 
Pa{z\x) ■ PAix)}x.zi£¥g and obtain (i) the joint typical set: 



5 



\XZ) = Ux,z) s.t. foraUx,zeF<„|iV(xz|fz)-nP^(x,z)| < ^f^^fe^}, (7-30) 
(ii) the set of typical X-sequences: 



(X) = {x e F;' I (f , z) e T^{XZ) for some z e F^}, (7.31) 

and (iii) the conditional typical set of Z-sequences for a given e F^: 

n{z\x) = {ze F« I (f, z) e n{xz)}. (7.32) 

A CSS code C encoding fc = fci — fc2 qudits into n is a stabilizer code whose n — k dimensional stabilizer 
L is constructed from two linear codes C2 C Ci, where Ci is an [n,ki]q code correcting bit errors 
and C2 is an [n,n — k2]q code correcting phase errors. Let us fix n, k and an n — fc dimensional 
stabilizer L = L{Ci,C2) and encode k qudits into one of the codespaces C{L,s) labeled by s e F^^^'^. 
A non-degenerate correctable error set J{L) for the CSS-type stabilizer L can be specified by fixing a 
transversal Fi of F^/Ci and a transversal F2 of F^/C^, 

J(L) = {XZ(a^, a') I e Fi, a' G F2}. (7.33) 

Let us assume now that the actual error of the Pauli channel is in the set T"{XZ). We split up the 
recovery operation for the correctable error set J{L) into two parts. In the first step, we try identify the 
bit error x e Tg^{X) by using a typical set decoder: Fi is chosen in such a way that each of its coset 
representatives is either the only coset member which is in Tg^{X), or, if there are none or multiple coset 
members which are in Tg^(X), it is chosen at random. By measuring the bit error syndrome (i. e. by 
measuring the eigenvalue list of the Pauli operators corresponding to the first n — fci generating elements 
of L), we identify a coset of Ci in F^ and conclude that the actual bit error x is the corresponding coset 
representative in Fi. In the next step, we use the information about the bit error x to reduce the 
uncertainty on the remaining phase error z: Since we know that z has to be in Tg(Z\x), we apply 
typical set decoding for the set Tg{Z\x) by setting F2 accordingly. The measurement of the phase error 
syndrome (corresponding to the eigenvalue list of the Pauli operators corresponding to the last fc2 
generating elements of L) , identifies a coset of in F^ and we conclude that the actual phase error z 
is the corresponding coset representative in F2 . To find a lower bound on the minimum fidelity, 

^;,(C(L,.-),7^(^(i)..-^^^") = ,,min {m(j(L),sM'^''i\^M)M^ (7-34) 
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of our coding scheme, we note that the fidelity will certainly be greater or equal than the probability 
of success of the coding scheme. In other words, one minus the fidelity will be upper bounded by the 
probability of failure. We proceed by finding an upper bound on the probability of failure. Our scheme 
fails if (i) the actual error is not within the joint typical set Tg{XZ), (ii) it is in Tg{XZ), but bit error 
correction fails because the measured coset of Ci in contains multiple coset members which are in 
Tg"{X), or (iii) the actual error is in Tg{XZ), bit error corrections works, but phase error correction 
fails because the measured coset of in F^ contains multiple coset members which are in Tg{Z\x). 
Conditioned on the assumption that the actual error is {x, z) € T^{XZ), bit error correction fails if the 
following boolean expression is true, 

Fbit = (3f' e T^"(X) with x' ^xs. t.Hi{x - x'f = CF), {Hi parity check matrix of Ci), (7.35) 

and phase error correction fails (assuming that bit error correction succeeded) if 

i^phaso = (3f e T^{Z\x) with z' ^ zs.t. H2{z~z'f = (F), {H2 parity check matrix of C^), (7.36) 

is true. Using these boolean expressions, we obtain 

l-Fp = l- Fp{C^L,s),n^j^L),s)A'^") 

< PAi^+ E ^Jl(eO-l[^bitV(-Fbit AFphasc)] 

<A+ Y ^jl(e) • l[^bit VFphase] bythm[5Xl3 
Serpixz) 

< A + Y ■ (l[^bit] + l[Fpha.c]) 

eeT^(XZ) 

<A+Y pm ■ ( E 1 [^-(^ - - ^] + E 1 [^^(^ 



Now we are going to take the average of 1 — i^p over all code pairs (Ci,C2) which satisfy C2 ^ Ci. Let 
us denote by 

An,k,q = {C C f;; I C is a [n, fc],-code} (7.37) 

the set of all [n, k]q codes. Let JC be an [n, n]q code and let c be some nonzero codeword in F^, then we 
denote by An^k,q{c) the set of all [n, k]q codes which contain c, and, in an analogous fashion, we denote by 
An,k,q{^) and An^k,q{^: c) the set of codes which contain K. and /CUc, respectively (see section [CTT]) . We 
denote the average over all codes by {{')q±)q^ using the shorthand notation {■)^± = {')c^eA k (c^) 
since we are allowed to average only over those codes which include . With the help of corollaries 
[gOl and lCTSl we obtain 

((1 - ^pW)c. < a + E p^iei E '^"f7f7^'^' + E P^ie^ E (^nf^^^^^^w^)c 

eeT-iXZ) S'eT^-(X) SeT-iXZ) S'^T^izU \^^''^-k2A^l )\ 'Ci 

< A + E PJ{^{\n'\X)\ - l)q-+'^ + E PjmT^{Z\x)\ - 1)9-'=% 

e€T^(XZ} e&T^{XZ) 

and by part c of theorem 15.4.21 

< A + exp,(n(i?[iogj {X) + d)-n + fci) + exp^ ("(-^[log,] {Z\X) + 2S) - /cs) • 

This quantity becomes arbitrary small for sufficiently large n, as long as ni?[iog ] (X) — n + ki < and 
nH[iog^]{Z\X) — /c2 < 0, which can always be satisfied as long as 

^^-^ < 1 - 7ii7[iogj(Z|X) - ni/[iogj(X) = 1 - H[iogj(X^). 
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So far we have shown that the fidehty averaged over aU code pairs (Ci,C2) such that C2 C Ci is larger 
than 1 — £, 



{{Fp{C^L{CuC2),^^T^iJiL),s)A^"))c±)c, > 



1 



It follows that there exists at least one pair of codes (Ci,C2) such that -Fp(C(i(Ci,c2),s): ^(J(i),s)^'*") is 
larger than 1 — e. □ 



7.4 Concatenating Random and Deterministic Codes 



It was shown by Shor and Smolin in |sS9d | (and later together with DiVinccnzo in (DSSoi]) that the 
achievable rate for reliable quantum communication over a memoryless Pauli channel A : S{Ti.) S{Ti.) 
using random stabilizer codes (section l7.3p is indeed only a lower bound on the quantum capacity of 
the channel: By concatenating a certain deterministic inner code with a random outer code, they found 
that reliable transmission over the depolarizing channel, a special type of Pauli channel characterized 
by a single noise parameter p, becomes feasible for higher values of noise than allowed by random 
codes alone. This result is somewhat surprising since in the classical case, random codes do achieve the 
capacity of discrete memoryless channels. 

For a given inner code, concatenated as described above, we determine the achi evable rate for rel iable 
quantum communication over a memoryless Pauli channel in subsection ITXTI [DSSQSI : iHamOSt . In 
the subsequent subsection 17.4.21 we show that this rate ca n be expressed a s coherent information of a 
maximally mixed state in the codespace of the inner code DSS98I : lHam05l | . We apply these results to 
the depolarizing channel using a so-called cat code as inner code in the following section. 



7.4.1 Achievable Rate 

We are going to determine the achievable rate for reliable quantum communication over a memoryless 
Pauli channel, when using a concatenated code whose outer code is chosen at random. Let the deter- 
ministic inner code be an [[n, fcjjg code with stabilizer L'" — {gi, . . . ,g„_fe}, and let an extension to a 
hyperbolic basis of F^" be given by {.g„_fc+i, ■ • • , 5n, hi, ... , hn}. By writing a vector a e F^" as linear 
combination of the basis elements of such a basis, 

a= «, . . . ,aj;,ai, . . . ,a^) 

n — k n 

with Si = (.gi, a)sp, (a, hi)sp for z G {1, . . . , n - k} and ^j^_(„_j,) = (ffi, a)sp, ^i_(„_fc) = (a, ^i)sp for 
is {n — fc -I- 1, . . . , n}, we derived lemma IB. 2. 3[ relating the corresponding Pauli operators: 

XZ(a)~X^"''"¥"''"^ (7.38) 

This relation allows us to rewrite the action of a memoryless Pauli channel A'^'^ defined by the proba- 
bility distribution -P4 (a = (a^, . . . , a^, of, ... , a^)) = n"=i PAio-^iO-t), as follows: 

: p ^ ^«"(p) - P^icl) XZ{d)pXZ{a)\ 

= E E PA{s,n,FS''){X^''^^Z^''-^^)p{X^'^^^^ (7.39) 
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In addition to Pa{s, n, P, Z^) = P^ia) we define 

and the conditional probability i^(/^,P|s) = i^(s, P)/i^(s). Note that Pa{s,F ,F) denotes the 
probability of having an error in a certain coset of i'" in F^", and Pa{s) denotes the probability 
of having an error in a certain coset of L™-^ in F^". Hence, the probability distributions given by 
{J^(s, and {Pa{s)} do not depend on the detailed form of the hyperbolic basis (and therefore 

on the encoding), but depend only on the stabilizer L'" itself. 

Let the random outer code be an [[A^, ii'JJq code as in section 15^ fwith N divisible by k). We encode 
some i^-qudit quantum state within one of the codespaces of the concatenated code and send the 
resulting n = N/k x n qudits through the Pauli channel ^"SiJV/fexn^ rpj^^ result of a measurement of the 
first N/k X {n — k) operators Zcon.ii * G {Ij ■ • ■ ? N/k x {n — k)} (which corresponds to a measurement 
of the N/k syndromes of the inner codes) can be expressed as S — (si, . . . , Sjv/fc), Sj E F^^'^' for 
j = 1, . . . , N/k. Applying definition 15.4.21 of a set of jointly strongly 5-typical sequences of length N/k 
to the two random variables E and S taking on values I = (P, P) S F^'^ and s S F^"*^ according to the 
joint probability distribution {P^il, s)} given by (j7.40|) . we obtain (i) the joint typical set: 



^^\ES) = {{L,S)s.t.iora\Ue¥f,se¥--^ N{ls\LS) - ^Pa{1, s) < (7.41) 

K k logq |lr q \ ■> 



with L = (Zi, . . . , Zjv/fc) — (^1 J ^1 J ■ ■ ■ 1 ^N/k^^N/k) ^ F^^'''^^'", (u) the set of typical S'-sequences: 

T's^'^iS) = {5 e Ff /'^•^("-'^) I (L, S) e T^'^{ES) for some L e Ff/'^^^fei^ (7 43) 
and (iii) the conditional typical set of i?-sequences for a given S G Yq^^^^"' 

T^'\e\S) = {(£, S) I (L, 5) e T^'\eS)}. (7.43) 

Let us assume now that the actual error j®N/k^n jg T^^^i^ES). This assumption is satisfied, since 
for N/k sufficiently large, the probability of the error being in T^^^{ES) is larger than 1 — A for any 
A > (part b of theorem l5.4.2p . Conditioned on the result S of the measurement described above, the 
situation is equivalent to a scenario where only an [[A^, ifjjg code is used to protect against the Pauli 
channel 

N/k 

Aff = (g)^,, with g, : 5(W«'=) ^ 5(H«'=), (7.44) 

where Qj is a general Pauli channel whose probability distribution Pg. — {i^(Z|sj)} depends on the 
value of Sj in S — {si, . . . , sV/fc). Since the errors of AeS are known to be in T^'^{E\S), we are going 
to use corresponding typical set decoding. It is known from the proof of theorem 17.3.11 that taking the 
average over all [[N, K]]q codes results in an average minimum fidelity which is greater than 1 — e for 
any e > 0, as long as the exponent of 

{n{E\S) ~ 1) • <z^-^ < exp,(^(iJ[iog^](i?|5) + 25) ~ {N ~ K)) (7.45) 

is negative and N/k is sufficiently large. Since 

i^[iog,](i^i5)= E ^^(s0^f,-[log,](m(^^p|s)}), (7.46) 

we ' 



have proven the following theorem due to DSSQSl for fc = 1 and q — 2] and jHamOSj . 
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Theorem 7.4.1. Let A : S{T-L) S{T-L) be a Pauli channel with probability distribution on F^, let 
some inner [[n,k]]q code be fixed, and let e > 0. Then there exists an outer [[N,K]]q code such that for 
any codespace of the corresponding concatenated [[n, K]] code (with n = N/k-n), there exists a recovery 
operation with minimum fidelilty larger than 1 — e, as long as the total rate K/n satisfies 



K 
n 



<^(^- E ^^G?)i?,-[iog,]({P^r,P|s)})), (7.47) 
where {Pa{s)} and {F^(r^, f^js)} are defined by ^(TM) . 

Remark (i) . Hamada shows the stronger result that one minus the minimum fidehty is uppe r bound ed 



by epsilon, where epsilon drops exponentially in N/k as long as condition (|7.47p is satisfied [Ham05 |. 

Remark (ii). If the deterministic inner code is a CSS code, we might concatenate it with random outer 
CSS codes as in theorem 17.3.31 Since the resulting code will also be a CSS code, this means we could 



achieve the rate in equation (|7.47p by using only CSS codes. This result has been used by Lo [Lo01| 
to improve the security proof of the 6-state protocol: While the standard security proof obtains the 
maximum tolerable bit error rate from the hashing rate of theorem I7.3.3[ Lo used the CSS analog of 
theorem 17.4. 1 1 to obtain a maximum tolerable bit error rate given by equation (j7.47p . By using an inner 
CSS code whose stabilizer consists entirely of Z-type operators, the protocol remains to be reducible to 
a prepare and measure scheme. (The inner code used by Lo is the so-called cat code which is treated 
in detail in section [731 ) 

7.4.2 Achievable Rate and Coherent Information 

In the preceding subsection we showed that by concatenating a deterministic inner code with a random 
outer one, we can achieve reliable quantum communication over a memoryless Pauli channel up to a 
rate given by theorem l7.4.1l We are now going to express this rate in terms of the coherent information 
of a maximally mixed state defined on one of the codespaces of the inner code. This way a relationship 
with the quantum capacity Q{A) of a memoryless Pauli channel A : 5(7i) — > 5(7i) is established, which 
can be expressed as regularized coherent information (|7.4p . 

Q{A)^ lim imax/e(p,y^®"). 

n— ►oo n p 



We prove the following theorem due to |dSS98I . for A: = 1 and q — 2\ and HamOSj: 



Theorem 7.4.2. Concatenation of a random outer ^N^K]]q code with an inner [[n^k\\q code with 
stabilizer L allows for reliable quantum communication over a Pauli channel defined by a probability 
distribution Pj^ on as long as the total rate Kjxv satisfies (theorem \7.4-l^ 



^<^(^- E ^^(^1^,-[iog,]({^^r,'^l5l}))- (7.48) 

sew" 



n n 



This rate can be expressed as the coherent information of a maximally mixed state defined on one of the 
codespaces C{L, s) of the inner code, 

= ^/c(^nc(,,.-„^«"). (7.49) 

Proof. Let p be a maximally mixed state defined on one of the codespaces C{L,s) of the inner 

code, 

1 



■^Urir. = 4^ E \^o,c){so,c\, 



T-C(L,so) , 
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where TIc(^l,so) denotes the projector on codespace C{L, sq), and let 

l#o> = \^o,c)(E) |c) 

V 1 jgFfc 

be a corresponding purification of p. Since the coherent information Ic{p,A'^") is defined as the dif- 
ference between S{A'^"{p)) and S'(^®"' (8) 2'(|V'so)(V'so I)) iii equation (|7.3p . we proceed by calculating 
these quantities. We start with the von Neumann entropy of A®"{p): By making use of the channel 
representation in equation (j7.39p . we obtain 

and eventually 

= fc + ff,-.-.pog,]({P^(50}). (7.50) 

To determine the von Neumann entropy resulting from a channel application to a purification of p, we 
use again the channel representation in (|7.39p and obtain 

with 

V 9 jgFfc 

One can easily check that the set of kets 

forms an orthonormal basis of 7Y'^("+'^). Therefore, the von Neumann entropy of A^"^ <?) l{\ipgg){^gQ\) 
is given by the corresponding Shannon entropy, 

S{A^-®I{\^P,„){4',J)) = if,„+.[iogj(m(s,r)}). (7.51) 

The proof is finished by subtracting (j7.5ip from (|7.50p . □ 



7.5 Concatenated Codes and the Depolarizing Channel 

The depolarizing channel is a special type of Pauli channel which is characterized by a single noise 
parameter p G [0, 1]. It can be interpreted as a quantum channel which transmits a qudit of dimension 
q unperturbed with probability 1 — p = 1 — pq^ /{q^ ~ 1)? while exchanging it with the completely mixed 
state I/q with probability p. By con catenating certain inner codes with rand om oute r codes, it was 
shown by Shor and Smolin in [sS96t (and later together with DiVincenzo in [dSS9^) that for very 
noisy depolarizing channels, the hashing rate given by theorem 17.3.11 frepresenting the achievable rate 
for reliable quantum communication using random codes alone) can be exceeded by the rate in theorem 
17.4.11 (representing the achievable rate using concatenated codes) . In this section we present these inner 
codes and determine the resulting rates. For the depolarizing channel, the maximum amount of noise 
Pmax is defined as the level of noise for which the quantum capacity becom es zer o. The best lower 
bound on Pmax of the qubit depolarizing channel known so far was found in [SS07| by using an inner 
[[5 X 16, 1]]2 code. We improve this bound by presenting the results of numerical calculations up to an 
inner [[5 x 22, 1]]2 code. 
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First, we define the depolarizing channel in subsection 17.5.1] Then, in subsection 17.5.21 we briefly 
review how the action of a Pauli channel is rewritten for a fixed (inner) code as it was done in subs ection 



17.4.11 Subsection 17.5.31 presents the so-called cat code, the inner code used in jSS96l| and 



DSS98|. The 



succeeding subsection 17.5.41 deals with the concatenated cat code of DSS98l | and |SS07l | . This code 
results from concatenating an outer 'flipped'-type cat code with an inner 'standard' cat code and leads 
to the best known lower bound on the maximum tolerable noise Pmax of the qubit depolarizing channel. 

7.5.1 Depolarizing Channel 

Definition 7.5.1. The depolarizing channel Vp : iS(7Y) 3(0.) is a Pauli channel between density 
operators on a q-dimensional Hilbert space 7i, whose probability distribution on is characterized by 
a single parameter p G [0, 1]: 

e#(0,0) 

Vp:p^Vpip) = {l-p)p+ J2 -^XZie)pXZie}l (7.52) 

Remark. The depolarizing channel Dp can be written as 

Vp-. p^Vp{p) = {l-p)- p + p-^I, (7.53) 
with p = p ■ /{q'^ ~ I) by using the fact that 

1 ^ XZ{e^pXZ{e)^ = -I, (7.54) 

for any normalized p G S(Ti.). 

The highest value of p up to which the quantum capacity of the depolarizing channel Vp remains 
non-zero is defined as the channels maximal tolerable level of noise Pmax, 

Q(25p„,ax) = 0. (7.55) 

For the qubit depolarizing channel {q — 2) we get a lower bound on Pmax by calculating the value of p for 
which the hashing rate of theorems 1 7. 3 . Il and 17.3^ becomes zero. We obtain p,„ax > Pmax = 18.9290%. 

While taking the limit as the number of channel uses goes to infinity prevents us from calculat- 
ing the quantum capacity of the depolarizing channel using the regularized coherent information in 
equation (|7.4p . 

Q{Vp) = lim -max/,(p,I?®"), (7.56) 
we are going to calculate the one-shot capacity of the qubit depolarizing channel, 

Q^i^^^p) = max /,(p,I?p). (7.57) 

p 

Lemma 7.5.1. The one-shot capacity of the qubit depolarizing channel is given by 

Q^^\Vp) = 1 - i/4[iog,]({l -p,p/3,p/3,p/3}), (7.58) 
which equals the hashing rate of theorem \7.3.1\ 

Proof. The representation of the depolarizing channel in (|7.53p shows us that the depolarizing channel 
does not depend on the basis in which the Pauli operators XZ{-) are defined. Therefore, we can assume 
without restriction of any kind that the state p which maximizes Q'^^\'Dp) is given by p = c|0)(0| + (1 — 
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c)|l)(l|, where {|j)}i=o.i is the basis of the qubit Hilbert space which defines the PauH operators (i.e. 
Z\l) = — 11) for example) . A pu rification of p is given by lip) — Vc|0) (g) |0) + ^/l~~c\l) (g) |1). Now we 
follow the proof given in AC971 section V] which shows by a straightforward calculation of 



fic,p) = Ic{p,Vp) = S{Vp{p)) ~ S{[Vp®I]{\yjm)) 
that for all values oi p the maximum of f{c,p) is obtained for c ~ 1/2. 



(7.59) 
□ 



7.5.2 Paul! Channel Representation for a CSS Code 

In subsection 1 7 . 4 . 1 1 we determined the achievable rate for reliable quantum communication over a mem- 
oryless Pauli channel for a concatenated code whose outer code is chosen at random. We repeat briefly 
how we rewrote the action of a Pauli channel A with probability distribution {i^(a^, a^)}, (a^, a^) € F^, 
for some given inner [[n, k]]q code to arrive at a channel with probability distribution {i^(Z, s)}. Since 
all inner codes considered in this section are CSS codes, this time we specialize in an inner CSS code. 

As discussed in section 16.3.11 an [[n, fc]]g CSS code together with an encoding may be specified by 
two bases of 

F^' - span{^"f , . . . , el^fc, ,ril,...,rg„pl...,pl} (7.60a) 
and F;' = span{r;T, • ■ ■ , V^-k, , , ■ ■ • , 4 ' M?' ■ • • ' /^^i' (7-60b) 

with fc = fci — ^2, fulfilling conditions (|6.29p . By writing the x-component [z-component] of a vector a = 
(af , . . . , afj, af , . . . , a^) S F^" as linear combination of the basis elements of the {^f . . . ,fff . . . , pi . . .} 
[{fff . . . ,£_f . . . , pf . . .}] basis, we obtained (16.35p . 

n—ki k2 k 

i—1 j — 1 r—1 

n — fci k2 k 

«^ = E + E 4^71 + E ^rfil , (7.62) 

i—1 J — 1 r—1 

with sf — S^f ■ a^, — ffj ■ a'^, — p^ ■ and n'f — fff ■ , s| — ■ a' ^ — p^ ■ , which led to 
lemma [6.3. 11 relating the corresponding Pauli operators: 

XZ(a)^X^^""'"°''"¥"^'"^''"^ (7.63) 

This relation allows us to rewrite the action of a memoryless Pauli channel with probability 

distribution P^(a = (af , . . . , a^, af , . . . , a^)) = nr=i PAiaf,af) as 

E PJlia)XZ{a)pXZ{a)^ 
= E E PAis,nJ){X^^^''''^^Z^"''''''''')p{X^-'^'''^^^^^^^ (7.64) 

with s= {s^ e F^-'^Ss^ e F^2) G F^-'^, n (n^ e F^-^^Sn^ G F^^) e F^"*^ and (f^ G Fj,r^ G 
F^') G F^'^. In addition to i^(s, n, /) = i^'(a) we define the probabilities 

PAisJ)^ E ^^(s^,^:0, ^^(s)= E ^^(^^'^")' PAm^PAisJ)/PAi^, (7.65) 
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(a) 'Standard' cat code. The operators on the 
left hand side are {XZ(0, If)} (i = l...m - 1 
from top to bottom) and XZ(0,/I^), those on the 
right hand side are ,0)} and XZiJP" , 0). 
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(b) 'FUppod' cat code. The operators on the left 
hand side are {XZ{^f , 0)} (i = 1 . . . m — 1 from 
top to bottom) and XZ{0, fl^), those on the right 
hand side are {XZ(0,»7f)} and XZ(fl^,0). 



Figure 7.1: The encoded Pauli operators corresponding to a certain encoding of (a) the 'standard' cat code 
and (b) the 'flipped' cat code, both encoding one qubit into m = 4. Operators corresponding to (generators of) 
the stabilizer are within the dotted line, operators corresponding to (generators of) the normalizer within the 
dashed one. 



as in equation (|7.40p . The achievable rate R for reliable quantum communication over a memoryless 
Pauli channel characterized by {i^(a^, a^)}, (a^, a^) e F^, is given by theorem 17.4. II 

^ = \{^- E PA{m,^-[io^,]{{PA{im))- (7.66) 

To determine R for the inner [[n, fc,]], code specified by (|7.60p . we obviously have to know the corre- 
sponding probability distributions {Pj\^{s)} and {/^(/js)}. In the following subsections we determine 
these distributions for various inner codes. 



7.5.3 The Cat Code 

The cat code used in |SS96l : IPSSQSt is an [[m, k = 1]]2 CSS code with A: = fci = 1 and fca = 0. It is 
specified by a classical code = spanj^f , . . . ,'Cm-fei}' where the entries of the vector are given by 
(^f )j — 5j^i + for j e {1, . . . , to}. The corresponding stabihzer is L = span{(0, ), . . . , (0, 
We consider an extension to the bases 



and W^^{r^l,...,n^a_,,^F) 



(7.67) 



as shown in figure 17. ]|(a)[ To construct the encoding C/onc associated with these extensions, we set the 
phase factors 9z{-) and Ox{-) equal to one as it was done in subsection 16.3.11 Then, the corresponding 
encoded states of equation (|6.32p become 

m— 1 

1=1 

The code is called cat code because a pure one qubit state a|0) + (3\l) encoded in the codespace C(L, 0) 
becomes a cat state, 

f/cnc|0) ® (a|0) + = a|0, . . . , 0, 0) + /3|1, ...,1,1). (7.69) 

We do not calculate the probability distributions {Pa{s)} and {i^(/|s)} for the cat code, since they 
emerge as a special case of the corresponding distributions of the concatenated cat code in subsection 
17X41 (see equation (fTM)) ). 

The cat code improves the hashing rate lower bound pjjf^^ ^ 18.9290% on the maximum tolerable 
level of noise Pmax of the qubit depolarizing channel. By setting the rate Rm{p) of (|7.66p for a cat 
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Figure 7.2: The maximum tolerable value of noise p for the qubit depolarizing channel Vp as a function of 
the size of the inner [[m, 1]]2 cat code. The highest value p'^lx{m — 5) = 19.0356% is obtained for m — 5. 



code of size m equal to zero, we obtain the values Pmax("^) shown in figure [7T2] The highest value (and 
therefore the best lower bound on Pmax) is obtained for m — 5, p^ax("^ = 5) = 19.0356%. The rates 
Rmip) for m — 3 and m — 5 are shown in figure [7751 (blue). 

Rema rk. As discussed in the remark following theorem 17.4.11 the value Pmax('^ = 5) was used by Lo in 



LoOlj to improve the security of 6-state quantum key distribution protocol. Since the 6-state protocol 
corresponds to a qubit depolarizing channel 1^3^, he improved the maximum tolerable bit error rate of 
the 6-state protocol from | • p^^i^ = 12.6193%"to | • p^^l^im = 5) = 12.6904%. 

The concatenated cat code presented in subsection 17.5.41 is obtained by concatenating an inner cat 
code with an outer 'flipped' version of the cat code. We proceed by presenting this 'flipped' cat code, 
whose stabilizer is obtained from the stabilizer of the 'standard' cat code described above by exchanging 
the Z operators with X operators. 

'Flipped' Cat Code 

The 'flipped' cat code is an [[m, /c = 1]]2 CSS code with ki = m, k2 = m — 1 and = fci — ^2 = 1. It 
is specified by a classical code C2 — spanj^f , . . . ,^^^}, where the entries of the vector are given by 
(^f )j = Sj^i + Sj,i+i for j £ {1, . . . , to}. The corresponding stabilizer is L = span{(^J^, 0), . . . , (Cm-i, 0)}. 
We consider an extension to the bases 

^ = {rn,...,rf:^_,,n 

andF^ = Ur,...,d_i,A^^} 

as shown in figure 17. ]|l^b)[ To construct the encoding [/one associated with these extensions, we set the 
phase factors Ozi') and Ox{-) equal to one as it was done in subsection l6.3.11 Then, the corresponding 
encoded states of equation (j6.32p become 



s^, r-) = X^""'' ' V ■ ■ - O) - -j= E '^-'■"1 + ■ A?" )> with 3 = ^ s^rf^. (7.71) 



m— 1 



7.5.4 The Concatenated Cat Code 



By concatenating an outer [[to2, l]]q 'flip ped' cat code with an inner [[toi, 1]]2 'standard' cat code, we 
obtain the [[toi x TO2, 1]]2 code used in DSS98t SS07 | and shown in figure [7731 The [[toi x TO2,1]]2 
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Figure 7.3: The encoded Pauli operators corresponding to a liyperbolic basis of tlie concatenated cat code. 
Here mi = 4 and m-i = 3, so tliat one qubit is encoded into n = m\ x m2. The first 7712 x (mi — 1) operators on 
the left hand side are the {XZ(0, ^f)}, the next m2 - 1 the {XZ(^f,0)} and the last one is XZ{0,p''). Those 
on the right hand side are {XZ(rff,6)}, {XZ(6,fff)} and XZ(/i^,0) accordingly. 



code is a CSS code with parameters n = mim2, ki = m2, = m2 — 1 and k = ki — k2 = 1. We 
proceed by calculating the corresponding probability distributions {Pa{s)} and which allow 

us to evaluate the achievable transmission rate given in equation (|7.66p . 

Joint Probabilities of Logical Errors and Syndrome 

We are going to calculate the joint probabilities {Pa(1,s)} with I g F2 and s G defined in 

equation (j7.65|) for the [[mi x TO2, 1]]2 code described above. From {Pa{1, s)} we will obtain {Pa{s)} by 
summation over I and {i^(Z[s)} by = Pa{1 , s) / P_a{s) . Neither the details of the se calculation s 

nor formulas expressing the resulting probabilities have been presented in the literature DSSQSt SS07 |. 



We denote the elements of the probability distribution {J^(a^, a^)}, (a^, a^) G Fj, of the qubit Pauli 
channel A as {Pe,Px,Py,Pz}, i- e. 

Aip) = PeP + P.XpX^ + py{XZ)p{XZy + p.ZpZK (7.72) 

Then, by definition, PA{s,n,l) — P^{d), where a G F^" depends on s,n,l via the bases decomposition 
given in equation (|7.6ip . Pa{s, I) was defined in equation (|7.65p as 

P^(P,P,s-,s^)= E ^^(^^'"'0- (7.73) 

Do we have to calculate this sum for aU 2"i™2-i distinct syndromes s = (^ e F""^'"'"^^ € F™^"^) ? 
A moment's thought shows that Pa{1, s) actually depends only on the value of 

((0,/3i),(a2,/32),...,(am.,/3mJ), (7.74) 

where = s|_i and [3j is total number of ones in the j-th (mi — l)-bit block in (compare with figure 
17. 4[) . In addition, only the frequency distribution of the {ai,(3i) matters. 
For some s which has the properties expressed by (17.74p , we have 

Pa{1\1^^, ^) = PAil^'J^ (0, /3i), (a2, /32), . . . , (a™,, 

= E E ^i'(a-(5",n^P),a^(s-,n^P)). (7.75) 
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Figure 7.4: Graphical representation of the strings a"" — J2i ^i^i + l]j "-f Cj + ^"^M^" and = nf + 
X]j 'fl + ^^M^ foi' the concatenated cat code with mi = 6 and m2 = 3. The structure of the leads to an 
even number of completely filled blocks of size mi in the middle part of . Similarly, the structure of the ^? 
leads to an even number of ones in each of the m2 blocks of size mi in the middle part of . 



The sum over can be written as 



6l=0 f)m2=0 

which assures that the total number of completely filled blocks of size mi in (compare with figure 
I7.4p is even for P = and odd for P = 1. The sum over is decomposed into m2 sums each of which 
is written using the shorthand notation 



Here, li denotes the number of ones which are placed in a region of where contains ones counted 
by Pi, and ti denotes the number of ones which are placed in the remaining regions of . Therefore, 
there are U K-errors, (3i — U X-errors and ti Z-errors if bi = 0, while there are li Z-errors, ti y-errors 
and mi — Pi — ti X-errors if 6j = 1. Altogether we obtain 

1 1 1 I ^ -iNy- fc.+r (O'/'i) ("2,ft) (am2,/3™2) 

PAi\i\^-Y.--- E ^ 2 ' ^ ^ ■•• 5: 

i=l 

which can be simplified by applying the following binomial series identity, 



l + (-l)^-+' 1 



E U \ = ^ ((- + y)" + (- 1)' (2/ - ^T) . (7-79) 

first to each sum over U and then to each sum over ti, leading to 
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with 

Fo(P, a, /3) = i [{p,+pyf{l ^p,- pyr^--P+ - Pyf{l ~P.~Py~ 2p,)™-'^] (7.81a) 

a, /3) = i [(1 - p. - + Pyr'^-^+ (-1)'^+"(1 - p. - - 2p,)^(p, - PyT'^-^] . (7.81b) 

In the above expressions we replaced Pe by 1 — Px — Py — Pz- By adding up the last remaining sums over 
the bi, eventually we arrive at the final result, 



p^(^^^^5) 



Y[{FoiF,a,,(3,) + F,iF,a,, ft)) + (-1)'^ ^(^o(^^ ft) - i^l(^^ a„ ft)) 



(7.82) 



where ai is always assumed to be zero. 

The observation that only the frequency distribution of the (a^jft) matters allows us to speed up 
the summation over all possible syndromes drastically. To calculate the total probability of getting a 
certain logical error, we have to evaluate the sum over all 2™i'"2-i syndromes s, 



mi — 1 



E('"r' 



,81=0 



Pi 



mi — 1 



ft 



mi — 1 

Pin-2 



E 

(a2,/32 ),..., (a™2,/3„2) 

P^(P, P, ((0,ft), (^2, ft), . . . , (a„,,ft„J)). 



(7.83) 



(7.84) 



Since (a^jft) takes on 2mi different values, this expression simplifies to 



mi — 1 

= E 

/3i=0 



m2 — 1 

E 



(m2 — Ij! T-r / mi — 1 \ 



mi — 1 

ft y ^ „ ai!a2! ... a2mi! V /3(«) 

' ai,a2,...,a2mi=0 4=1 ^ ' ^ ' 

s. t. y^^- Q^=m2 — 1 



n 



P^(P, P, ((0, ft), {(a(j), /3(j))"^ b=i...2mi )) . (7.85) 



Instead of adding up 2™!"*^ ^ terms as in (|7.83p . we only have to consider mi • ( 



m2 — l+2mi — 1\ 
m2 — 1 / 



terms. 



Joint Probabilities for the Cat Code 

By setting m2 = 1 and toi = m in equation (|7.82p . we get the joint probabilities for the [[m, 1]]2 cat 
code of subsection 17.5.31 

Pa{1\1\ n = I [(p. + Pyf^-^-'^^^^il -P.- + 

i-lfiPx -Pyf'"^~'^^+'{l-Px-Py - 2p^)^'-nirn-2p)+p] (7 gg) 



Here, (3 denotes the number of ones in s = s^. 

Remark. If we calculate expressions like (|7.8ip or (|7.86p for the depolarizing channel Dp, we have 
Px = Py = Pz = p/3 and therefore some of the products in these expressions become zero. If such a 
product is exponentiated, as it is the case for the term [px ~ Pz)^ for instance, one has to take special 
care of the case /3 = in which the term is equal to one. 
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Figure 7.5: Achievable transmission rates for various [[mi x m2, 1]]2 codes over the qubit depolarizing channel 
Dp plotted as function of the noise p: The hashing rate (corresponding to mi — m2 = 1) (black), the cat code 
(m2 — 1) with mi — 3 and mi — 5 (blue), the concatenated cat code with parameters mi — 3,m2 — 19 (red) 
and mi = 5, m2 — 15 (orange). 

Results for the Depolarizing Channel 

We use ()7.82p and (|7.85p to evaluate the achievable transmission rate of equation (j7.66p for various inner 
[[toi X 7712, 1]]2 concatenated cat codes concatenated with random outer codes over the qubit {q = 2) 
depolarizing channel Vp. The hashing rate (corresponding to 7711 — m2 = 1) is compared with the rates 
of various concatenated cat codes in figure [731 It can be seen that the hashing rate, which equals the 
one-shot capacity as shown in lemma [7. 5. 11 

g(i)(I?p) = max/,(p,I?p), (7.87) 
p 

is surpassed e.g. by the rate of the cat code (7712 = 1) of size 771 = 7711 = 5 for high values of noise 
(p w 0.19). Since this rate may be expressed as 

i/e(inc,I?f), (7.88) 

where He denotes the projector on one of the codespaces of the [[5, 1]]2 cat code (see subsection l7.4.2p . 
it is clear that the limit as n goes to infinity in the regularized coherent information expressing the 
quantum capacity of a quantum channel A, 

Q{A)^ lim imax/,(p,yl^"), (7.89) 

ri— +00 77 p 

is crucial since this example shows that in general Q^'^''{A) = ma,XpIc{p,A'^'^)/n might be larger than 

So far lower bounds on the maximum tolerable noise Pmax of the qubit depolarizing channel have been 
determined by (i) setting the hashing rate of theorem [7 . 3 . 1 1 and 17 . 3 . 31 eg ual to zero ^ Pmax = 18.9290% 
and (ii) by setting the rate of (|7.66p for a cat code of size m equal to zero ^ Pmlxi''^ = 5) = 19.0356%. 
Now we set the rate of (j7.66p for various [[rrii x 7(7,2, 1]]2 concatenated cat codes equal to zero. The 
corresponding tolerable values of noise are plotted in figure VTM as a function of 7712 for various values of 
7771. It can be seen that for 7711 = 3 the best lower bound is obtained for 7772 — 19, Pmax''^^*(''^i = 3, 7712 — 
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Figure 7.6: The maximum tolerable value of noise p for the qubit depolarizing channel Op as a function of 
the size m2 of the inner [[mi x m2, 1]]2 concatenated cat code for various values of mi. For mi = 3 the highest 
value is obtained for m2 — 19, Pmax '^^'l'^^i = 3,m2 = 19) = 19.0857%. For mi = 5 the highest value shown is 
Pmax"""'(mi = 5,m2 = 22) = 19.0996%. 



19) = 19.0857%. Due to computational limitations (calculation of the mi = 5,?7i2 = 22 point took 
roughly a week on a Intel core 2 duo E8500 CPU), the toi = 5 curve was calculated only up to m2 = 22 
leading to the best lower bound known to da te of p ™"^"'''^*(toi — 5,m2 = 22) = 19.0996%. This beats 
the highest previously known lower bound of SS07| which was p'^^!;' ^'^^ (mi = 5, m2 ~ 16) ~ 19.0877% 
While the optimal value of TO2 for mi — 5 was conjectured in 
new data we expect it to lie slightly higher (maybe m2 ~ 30). 



SS07l | to be m2 w 25, according to our 
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8 Quantum Cryptography 



Quantum key distribution (QKD) protocols try to establish a secure and random key between two 
distant parties usually called Alice and Bob. While the security of corresponding classical protocols 
relies on the assumption that an eavesdropper has limited computational power, the security of a QKD 
protocol is guaranteed by the validity of quantum mechanics. Quantum cryptography was initiated by 
Bennet t and Brassard in 1984 who developed the first QKD protocol, which is now called BB84 protocol 
A natu ral extension of BB84 which makes use of four different quantum states is the 6-state 
which makes use of two additional quantum states. To prove the security of a QKD 



BB84 



Bru9 



protocol 

protocol, one makes the worst case assumption that the quantum channel connecting the two parties is 
under complete control of an eavesdropp er, usually named Eve. Since non-orthogonal quantum states 
cannot be cloned perfectly [DieSi |WZ8^ . the two users Alice and Bob are able to detect the presence 
of an eavesdropper by comparing some of Bob's measurement results with Alice's preparations in a 
step called parameter estimation. Depending on the result, they might either abort the protocol, or, 
if the action of the eavesdropper seems harmless enough, proceed with an error correction and privacy 
amplification step to obtain a random and private key. 

Using a quantum channel to create a secret key between two parties is closely related to using the 
channel to send quantum information, with many results found in one area applicable in the other. For 
instance, by treating the steps in a quantum key distribution (QKD) protocol coherently and viewing 
the entire process as an entanglement distillation scheme, one can use properties of random quantum 
error-correcting co des to prove the security of th e BB8 4 and 6-state protocols up to bit error rates of 
Pm^x"* = 11.0028% ISPOOf and p^f^ = 12.6193% |LoOiI| . respectively. Conversely, the formula for the 
quantum channel capacity can be obtained by i mporting the key rate r esulting from a general approach 
to secret key generation over a known channel |DW04| : loe^ ; (DWOSt . 

One of the surprising results related to quantum capacity is the non-optimality of random codes, in 
contrast to the classical case. As it was shown in chapter [SI the classical capacity of a channel can be 
achieved by using randomly-constructed block codes, and the independence of one input to the channel 
from the next results in a so-called single-letter formula for the capacity. While random coding can be 
used to create quantum error-correcting codes as well (compare with section [7. 3p . these do not always 
achieve the capacity. Better performance can be achieved by structured codes which exploit the ability 
of quantum error-correcting codes to correct errors without precisely identifying them, a property called 
degeneracy (compare with section [73]). 

By appealing to the coherent formulation of the protocol, degenerate codes should als o be u seful in 
QKD. Thi s was sh own to be the case in the original security proof of the 6-state protocol LoOl|, as the 
results of DSS98t were used to improve the error rate threshold to = 12.6904%. More striking 



threshold improvements are possible, if counterintuitive, by simply adding noise t o the raw key bit s 
before they are processed into the final key, a procedure known as local randomization KGR05 : RGKOSj l . 
This improves the error rate thresholds for the two protocols to p^ax'* = 12.4120% and = 14.1119%, 
respectively. At first glance, these results make no sense in the coherent picture of QKD, since adding 
more noise to already noisy entangled pairs only decreases the amount of pure entanglement which can 
be extracted. The entanglement/secret-key analogy does not hold perfectly, however; entangled states 
are sufficient, but not necessary, for creati on of secre t keys. A broader class of states, called private 
states, leads to secret keys when measured [hHH O05| . and these should properly be the target output 
of the coherent version of the QKD protocol. Indeed, the exact error thresholds are recovere d in th e 
coherent picture when the QKD protocols with local randomization are analyzed in these terms RS07 |. 
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With a systematic understanding of how degenerate codes and local randomization boost the key 
rate, it becomes sensible to combine the two methods to look for even higher thresholds. Recently 
it was shown in [SRSOSj l that doing so improves the error threshold of the BB84 protocol up to at 
least p^^^ R:! 12.92% by using the same type of structured code studied in |SS96l : bsS98; SS07] and 
subsection 17.5.31 These specific codes consist of the concatenation of two codes, the first a simple 
repetition code and the second a random code. The repetition code, sometimes called a cat code in the 
context of quantum information theory since the codewords are jO)**™ and jl)**™, induces degeneracy 
in the overall code since a phase flip on any of the physical qubits leads to the same logical error, and 
is corrected in the same way. In particular, blocklength m = 400 corresponds to the threshold stated 
above. Since the random code portion of the protocol corresponds to information reconciliation and 
privacy amplification in the classical view, the local randomization and the repetition code together 
become a type of preprocessing performed before these "usual" steps. 

In this chapter we show that the same preprocessing protocol as used in SRS08l | can also be used to 
improve the maximum tolerable bit error rate for the 6-state protocol, up to at least p^f^ = 14.5930% 
for a bl o cksize of m = 300. This is already quite close to the upper bound of 14.6447% |FGG"'"97I : 
KGRO5I: iMCLOej on the tolerable error rate for the BB84 protocol, and since the error threshold 



grows with blocklength, the bound is presumably exceeded at larger blocklengths, indicating the higher 
robustness of the 6-state protocol. We also improve the lower bounds for the BB84 protocol presented 



SRS08j . In addition we investigate iterating the preprocessing scheme in the BB84 protocol, and 



show an improvement both in rate and error threshold over single-round preprocessing for even modest 
blocklengths. The results presented in this chapter have been obtained in collaboration with J. Renes 
and have been published in KRO^. 

To begin, sec tion | 8 . 1 [explains the BB84 and 6-state QKD protocols and summarizes Shor and Preskill's 
security proof SPOot which uses the structure of CSS codes to show the equivalence between these 
protocols and corresponding entanglement distillation protocols. Section lST^ describes the preprocessing 
scheme in more depth and then derives secret key rate expressions for the BB84 and the 6-state protocols. 
Numerical calculations for blocklengths into the hundreds are then presented for the two protocols. We 
explain how representation theory is helpful for the numerical evaluation of such key rates in both cases. 
Section [8.31 examines the advantages of iterating the preprocessing protocol to achieve higher rates and 
thresholds for the same amount of effort in noise addition and block coding. 



8.1 BB84 and 6-State Protocols 



The BB84 BB84| | and the 6-state Bru98l | protocol are QKD protocols of the prepare and measure type. 
Their goal is to establish a random and secret key between two parties — usually called Alice and Bob 
— which are connected via a quantum channel and a classical channel. The quantum channel is fully 
accessible to an eavesdropper — traditionally called Eve — while the classical channel is assumed to 
be authenticated, i. e. Eve can only listen to the messages, but cannot interfere. (To authenticate the 
classical channel, Alice and Bob need to share a small secret key in advance. Hence, strictly speaking, 
QKD protocols are secret key growing protocols.) 



Remark. While Alice and Bob have to use two-way classical communication for the parameter estimation 
step of the protocol, this chapter deals only with protocols using one-way communication during the 
error correction and privacy amplification steps. The use of two- way com munication during these steps 
allows them to obtain a secure key for even higher levels of noise GL03j , which we assume is caused by 
Eve. 
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8.1.1 Description of the Protocols 

Let s = 2 for the BB84 protocol and s = 3 for the 6-state protocoL If we denote the eigenstates 
corresponding to eigenvalues +1 and —1 of the Pauli Z matrix by 10)^ and \l)z, the corresponding 
eigenstates of the Pauli X and Y matrices are given by 

|0). = (|0), + |1),)/V2 = (|0), - \l)z)/V2 (8.1) 

|0), = (|0>,+*|1).)/V2 |l), = (|0).-z|l),)/V2. (8.2) 

In addition, let B{0) = z, B{1) = x and B{2) = y. 

Alice chooses a random sequence of zeros and ones x = {xi, X2, ■ ■ ■ , xn) G of length N > 2 ■ s ■ n 
and a random sequence b = (&i, 62, . . . , 6iv) e Ff . Then she prepares the sequence of quantum states 
^iLi\^i)B{bi) and sends them to Bob. Bob chooses a random sequence b' — (fe'^, 63, . . . , 6'^) G ¥^ 
and measures the i-th qubit in the basis B{b^) denoting the result as yi E ¥2- After Bob finished his 
measurements, he announces this fact and both parties compare their strings b and b' . If bi 7^ 6^ they 
remove the i-th entry from their strings x and y. The resulting strings Xsiftod and ysifted form the sifted 
key and are of length 2 • n approximately. If the quantum states had been transmitted unperturbed, the 
sifted keys of Alice and Bob coincide, Xsiftcd = 2/siftcd- To check whether this is the case, Alice selects 
half of the bits to serve as check bits, submits her choice to Bob, and both parties compare this part 
of their sifted key. The resulting error rate is called the bit-error rate p. If the bit-error rate p is zero, 
they can be confident that no eavesdropper was present and may use the remaining n bits x'^n^^^,^ and 
y^ifjgj as a secure and random key. 

In practice there will always be a bit-error rate p > due to imperfections of the quantum channel or 
the presence of an eavesdropper. Hence the task is to proof the security of the protocols up to a certain 
bit-error rate Pmax- As long as p < Pmax, Alice and Bob should be able to perform error correction and 
privacy amplification to obtain a secure key k of length k < n from x i;f^„^ S F2 and from y^jft^d ^ ^2 • 



The first simple proof of security was given by Shor and Preskill [SP00l | : By treating the steps in a QKD 
protocol coherently and viewing the entire process as an entanglement distillation scheme, one can use 
properties of random quantum error-correcting cod es to prove the security of t he BB 84 and 6-state 



protocols up to bit-error rates of = 11.0028% |SP00l | and p'^f^ = 12.6193% jLoOlj . respectively. 



8.1.2 Shor and Preskill's Security Proof 



The security proof o f Shor and Preskill is based on the observation of Deutsch et al. [DEJ+96l | and 



Lo and Chau |LC99l | that entanglement distillation protocols provide a way to establish a secret key 
between the two parties Alice and Bob. If, as a result of an entanglement distillation protocol, Alice and 
Bob share (near) perfect states \^~^)ab = (|00)ab + |11)ab)/\/2, a bipa rtite meas uremen t of |$+)ab 



in the z-basis results in a shared secret bito. Shor and Preskill jSPO0l | (see also GP01 | for a more 



elaborate version of the proof) realized that an entanglement distillation protocol making use of CSS 



codes is equivalent to the BB84 protocol. Their proof was adapted to the 6-state protocol by Lo [LoOl | . 
In the following we describe the corresponding entanglement distillation protocol and its reduction to a 
prepare and measure scheme. For BB84, let T = ( | J-^ ) denote the Hadamard matrix mapping the 
z-basis onto the x-basis and vice versa. For the 6-state protocol, let 



T = „p(-i,X + y + Z)/v5.f).e"'. = _L(^; -'j (8.3) 

denote the rotation of angle 27r/3 around the axis (1, 1, l)/\/3, mapping the z-axis to the x-axis, the 
X-axis to the y-axis, and the y-axis to the z-axis. 



*A maximally en tangled s tate like \^~^)ab is not necessary to provide a secret bit; so-called private states are necessary 
and sufficient [HHHO05|. 
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Entanglement Distillation Protocol 

Alice prepares N — 2n maximally entangled pairs and chooses a random string 6 = (5i, . . . , fejv) e 

F^. After applying the operation Tg onto Bob's part of the z-th pair, she sends him his half of the 
states. Bob acknowledges the reception of his qubits. Alice picks out n pairs which have to serve as 
check pairs and tells Bob the string b together with her choice of the check pairs. Bob applies the oper- 
ation Tg^' onto his i-th qubit. Both parties measure the check pairs in the z-basis, share their results 
and obtain the bit-error rate p. Since there is no way for Eve to know the check pairs in advance, the 
bit-error rate of the check bits should be a pretty good estimate for the bit error rate of the remaining 
n pairs. 

Let us assume now that Eve's attack can be described by a memoryless Pauli channel where £ is 
characterized by the probability distribution iqj, Qx , Qy,<lz}- Of course Eve might apply any completely 
positive map, but, as it was pointed out in [LC99|, the entanglement distillation protocol which will 
be used to generate k < n (near) perfect pairs from the remaining n, commutes with a measurement 
of each pair in the Bell basis. Hence the most general attack of Eve can be described by a general 
Pauli channel which corresponds to the twirled version of Eve's attack (compare with theorem 17. 2. ip . 
Furthermore, it can be shown that if the entanglement distillation protocol is capable of correcting an 
uncorrelated Pauli attack, it is also capable of correcting a correlated one (if Alice and Bob apply a 



random permutation to their qubits; see e.g. GL03|). As a result of the application of the T^' with 



bi £¥s, parameter estimation assures us that the effective Pauli channel 

s-l 

£M T-'£{T'pT-')T' (8.4) 



is characterized by the probability distribution {puv} = {poOiPiOiPiiiPoi} s. t. 

\{l — 2p + t,p — t,t,p — t},t£[0,p], in case of the BB84 protocol. 

{Vuv\ = i s o o . r . r. , ^^-^i 

[{1 — |p, ^, ^, ^1, m case of the 6-state protocol. 

We are now going to describe the entanglement distillation protocol which is capable of distilling 
k < n (near) perfect pairs from the remaining state 1a ^ £fsB{i\'^^)(^'^\)'^'^) ^ ^ong as the 

bit error rate p is not too high. Let us fix a CSS code encoding k = ki — k2 qubits into n. As explained 
in section [6.31 together with an encoding C/onc such a code is specified by the two lists of vectors 

{C^ ■ • • , Cl-fci , ^, • • ■ , ?7fc, , Ml, ■ ■ • , Mfc} and 

■ • • , ^^ki , ^1 , • • ■ 7 Cfc2 ' ^1 ' ■ ■ ■ ' /^fc}' 

both spanning F2 and satisfying (|6.29p . where Ci = spanj^f, . . . and C2 — spanj^f", . . . t^^^} 

are classical linear codes satisfying C2 C Ci . Note that because of lemma IC.3.2[ 



l<J> 



+ )TB = UUA®U,n.,B\'^'-)TB-Z7^ E Zm^T. ^kT.\^^^^^*A%^^^B- (8.6) 




Alice measures her stabilizers {Z^ sends her resulting syndrome sa — {x, z) to Bob, who, by 

measuring his stabilizers {^i}i=i,....n-fc, obtains the syndrome sb — sa + s and calculates the relative 
syndrome s. Depending on s. Bob performs error correction. Eventually, Alice and Bob both measure 
{Z^}i=n-k+i,...,n and {Zi\i^n-k+i,...,m respectively, to obtain the k bit key. (Alternatively they might 
also decode, obtain \'^^)'ab, and measure in the z-basis to obtain the key.) 
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Protocol based on Quantum Error Correction 

Since Alice might perform her measurements immediately after the preparation of 1^"^)^^, the following 
procedure is equivalent: She chooses the syndrome {x,z), the key c, and the values of the check bits 
at random. Then she prepares the n-qubit state \x, z, c) and inserts the n check states prepared as 
10)2 or 11)2 in random positions. After choosing a random string b = (5i, . . . jb^) G F^, she applies 
the operation T'^' onto the i-th qubit, and sends her N ^ 2n qubits to Bob. Bob acknowledges the 
reception of the qubits. Alice tells Bob the string b together with the positions of the check qubits. 
Bob applies the operation T~^' onto his i-th qubit. He measures the check qubits in the z-basis, they 
share their check bit data, and, as a result, obtain the bit-error rate p. At this point Bob is left with 
the state £f^(\x,z,c){x,z,c\). Alice tells him the syndrome sa — {x,z), and Bob knows that the 
key is encoded in the codespace C[L{Ci,C2),sa) of the CSS code. He apphes the appropriate recovery 
operation TZsa by measuring the stabilizers {Zi\i=i^,,,^n-k followed by error correction. Eventually, Bob 
measures {Zi\i^n-k+i,...,n to obtain the k bit key. 

The rate k/n of the key they can generate this way depends only on the form of the memoryless Pauli 
channel £off which in turn depends only on the bit error rate p. Hence, lower bounds on the rates are 
given by theorem 17. 3. 31 which states that, as long as 

k 

- < l-ff4[log,]({PuJ), (8.7) 

and for large enough n, there exists a pair of codes C2 C Ci such that for any codespace C(l(Ci,C2),s) of 
the corresponding CSS code with stabilizer L(Ci,C2), there exists a recovery operation with minimum 
fidelity larger than 1 — e fo r any e > 0. To obtain higher rates, they might also use concatenated CSS 



codes as it was done by Lo |LoOl| (see the second remark following theorem l7.4.ip . 

Remark. In the case of the BB84 protocol the set {puv\ is not completely known and we have to assume 
the worst case, i. e. we have to minimize the key rates over the unknown parameter t e [0,p]. 

BB84 and 6-state Protocol 

Finally we are going to show that the protocol based on quantum error correction is equivalent to the 
BB84 and the 6-state protocol, respectively. The crucial observation is that the recovery operation for 
CSS codes decomposes into bit and phase error correction. Since Bob obtains the key by measuring 
the operators {Zi}i^n-k+i....,n, where Zn-k+j ~ XZ[Q, /i|) for j = 1 . . . /c, he does not need to perform 
phase error correction. Hence, he only needs to know the absolute bit syndrome x and the relative bit 
syndrome obtained by measuring the Zj = A"Z(0, ^|), j = 1 . . .n — fci. To obtain his measurement 
results, he might simply measure all qubits in the z-Basis, obtain a string ?/* G and reconstruct them 
via flj ■ y, j = 1 . . . k, and ^| • y, j = 1 . . . n — fci, respectively. Alice, who in turn does not need to send 
the phase error syndrome z, prepares on average the state 

^ J2 |f,^,c)(f,f,cl= E i E (-l)^"^"^-"^^l?i + c + y)(?i + c + yl 



1 



IC2I ^ 



E 

oeC2 

where y , 3 and c had been defined in (j6.33p as 



n — ki k2 k 

?= E 3 = E^^'?^' andc = ^c^/2f. (8.9) 

i—l i—1 i—1 

Note that + c G Ci and + c + y e so that Alice just prepares a sequence of n random states taken 
from the set {lO)^, 
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Figure 8.1: Maximum tolerable bit error rate pmax (left y-axis, black) and the corresponding rate q of the 
added noise for which it is achieved (right y-axis, blue) versus block length m. Dashed lines correspond to the 
BB84 protocol, solid lines to the 6-state protocol. 




In summary, we have the fohowing secure protocol: Ahce and Bob implement the corresponding 
QKD protocol as described in subsection 18. 1.1 1 As a result they end up with Alice having the n bits 
^sifted' -^o^ having the n bits y^jfted: ^^'^ both knowing the bit error rate p. They decide on a CSS code 
encoding k qubits into n which is able to correct the memoryless Pauli channel £^ characterized by the 
probability distribution of equation (j8.5p . Alice interprets x'^^f^^^ as (o + c) +y with random (o + c) G Ci 
and random syndrome f, and tells Bob the syndrome. Bob's data y^jftcd can be written as the sum of 
Alice's string plus an error, y's^f^^^ — x'^atcd + ^- -^^^ subtracts the syndrome, obtains (o + ?) + e, and 
performs bit error correction with the classical code Ci to obtain (o + c). To obtain the key, he extracts 
the coset of C2 in Ci, /If • (o + c) = pf ■ c = Ci. The last step can be viewed as privacy amplification: 
The correct fci bits included in (o + c) are shrtink into k = k\ — k2 private bits. 



8.2 Combined Preprocessing 



The preprocessing protocol proposed in SRSOSt combines local randomization with the use of a de- 



generated quantum code. It begins after Bob has received the quantum signals from Alice and they 
have sifted their raw keys to throw out mismatches between the preparation and measurement ba- 
sis. Alice then flips each of her sifted key bits {xi, . . . ,Xn) with probability q, resulting in new bits 
(ii, . . . , i„). These are partitioned into blocks of size m, and for each block she computes the syndrome 
(ii ® a;2, ii ia, . . . , ii ® Xm) and sends this information to Bob. He computes the relative syndrome 
of their blocks by adding his corresponding syndrome to Alice's, modulo two. Alice's message is public 
knowledge, but the first bit of each block is still secret, so it is kept as a potential key bit. The protocol 
then proceeds with the usual error correction and privacy amplification steps to transform these kept 
bits into a secret key, now aided by the relative syndrome of each block and knowledge of the proba- 
bility q of local randomization. Without local randomization, it turns out that m = 5 is the optimal 
blocklength for improving the error threshold in the 6-state protocol — long er block lengths have worse 
thresholds (compare with figure [721 of section FfTS]) . However, the results in [SRSOSj l indicate that with 
the addition of noise, the highest tolerable bit error rate of BB84 grows with the blocksize to, and we 
find a similar result in the 6-state case (see figure [0| . 
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8.2.1 Security Proof 

We determine the secure key rates of the BB84 and 6-state one-way key distilla tion pr otocols involving 



the preprocessing protocol described above using the security proof of Renner RenOSl . corollary 6.5.2]. 
This proof states that the secure key rate of such a protocol is given by 

r = — min {S{X\E) - S{X\Y)) (8.10) 

where the minimum ranges over the set of states F of all density operators on the 2x2 dimensional 
Hilbert space Ha such that the measurement performed during the parameter estimation phase 

of the protocol leads to a certain bit error rate p. The conditional von Neumann entropies in (|8.10p are 
calculated for the states 

which describe the processing of each block, including local randomization and syndrome calculation, 
and eventual measurement of the output qubits of the repetition code. That is, the preprocessing 
is treated quantum-mechanically or coherently, but the usual processing classically. Here X denotes 
Alice's key outcome when measuring the output bits and Y Bob's key and syndrome outcomes. 
For the BB84 protocol the set F contains the states 

CAB ~ (w, v), (8.12) 

u,v 

where ^ ^J2k and = {poo,Pio,Pii,Poi} = {l-2p + i,p-t,t,p-t}, t £ [0,p]. In 

the 6-state protocol, meanwhile, parameter estimation assures us that F contains only the single state 
aAB with {puv} = {1 - |p, f , f , f }■ 

Using Renner 's proof allows us to include the preprocessing but still only minimize over the quantum 
states a corresponding to individual signals. The crucial simplification is that the quantum state of 
the block can be taken to be the product cr^™ without loss of generality. Other proof techniques would 
require minimization over all possible (potentially-entangled) block states, or an additional step in the 
parameter estimation procedure to ensure that the state does have this power form. 



8.2.2 Computation of the Secure Key Rate 

To compute the secure key rates we make use of the fact that the difference of entropies in (|8.10p can 
also be written as difference of corresponding quantum mutual informations, i. e. S{X\E) — S{X\Y) = 
I{X : Y) — I{X : E). In order to calculate these quantities, we need to determine the states u^yTS 
defined in (j8.1ip for both protocols, i. e. for gab being a member of the two different sets F defined 
in the paragraph including equation (j8.12p . We are going to perform the rate calculation for a general 
Gab and specialize in the two different cases in the succeeding subsections. 

An m-fold tensor product of a purification of a general Bell diagonal uab is given by 

\a)ABE ^ WnBE.E, ^"£^,XZb{U,v)\<^^)%\^eMe., (8.13) 

where pa^^ = Y\T=i P^^i ■ now need to calculate the state resulting from noisy preprocessing followed 
by a blockwise stabilizer code measurement in which the stabilizers contain Pauli 2 and Z operators 
only. 



Local Randomization 

The first step, local randomization, can be described in a coherent way by adding a classical register 
A' (such systems will be denoted with boldface type) in the state ((1 — (7)|0)(0| + g|l)(l|)^™ and then 
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applying controlled not gates from the individual register states to the bits A. This leads to 

\<j')aBE - J2 y/P^-XZB{u + Lm^)'^B\f)A'\u)E,zl,Jv}E,, (8.14) 

where / S F™ and = q^ {1 — q)™-^^ for / — |/|, the munber of Is in /, a notation we shall use 
throughout. Here we have used the fact that Xa\^'^) ab = X b\^^) ab (compare with lemma [C. 3.11) to 
simplify the expression; this move is responsible for the operation applied to E2. 

Syndrome Measurement 

In the second step, Alice and Bob both measure the m — 1 (generators of the) stabilizers of a X/Z-only 
stabilizer code which encodes one logical qubit into m physical qubits. Using a public (authenticated) 
channel, Alice sends her syndrome to Bob who calculates the relative syndrome s by adding Alice's 
string to his measurement outcome modulo two. Afterwards both decode their encoded state. Such a 
stabilizer code is a CSS code constructed from classical linear codes C2 C Ci, where C2 ~ {0} contains 
only the zero codeword and Ci — {0, /if} is spanned by a single codeword fli (compare with section 
I6.3p . Together with an encoding J/encle, c) = |e, c), where 

m— 1 

P^=|c-A/T+^e,-7f), (8.15) 

our CSS code is completely specified by defining two bases {^f , . . . , ■^m-ii Mil ^-i^d {Vii ■ • ■ i Mi } 

both spanning F™ and satisfying condition (|6.29p (see section [6.3.ip . In this case the stabilizers are 
given by Zi = XZ{0, ), i = 1 . . . m — 1, and a measurement of these stabilizers on the encoded state 
(|8.15p will give the syndrome e. Measurement of the logical Z operator Z„i = XZ{0, jlf) gives the value 
of the encoded bit c. Applying one of the Xi = XZ(r/f , 0), i = 1 . . . m — 1, operators on a encoded state 
results in a flip of the i-th bit of the syndrome, while applying the logical X operator X^ ~ XZ{fIf, 0) 
flips the encoded bit, c 1-^ c 1. Both the set of all Zi and the set of all Xj are complete sets of 
commuting observables. Note that because of lemma [0.3. 2[ 

I*+)!b =C^c*„c,A®C/enc,B|<i>+)%"--=i= ^ 4 E ^^aP^B • (8-16) 

In other words, the maximally-entangled state of m physical qubits is the equal superposition of a logical 
maximally-entangled state in all the possible encodings. Also note that lemma 16.3.11 tells us that any 
TO fold Pauli operator can be decomposed as 

m— 1 

XZ{u', v) = n ' (8-17) 

1=1 

where sf — i^f • m', nf — fjf ■ v, and ^ fi\- u' and = flf ■ v arc the logical bit and phase flip errors 
resulting when this Pauli operator is applied to an encoded state like (|8.15p . Using these two facts we 
find that, after Bob's calculation of the relative syndrome s, the tripartite state can be expressed as (up 
to a local unitary acting only on Eve's systems) 

\a")ABE = E • {U + f),^l'i ■ v)\'P+)AB\f)A'\^E,Zi^\v)EM-B', (8.18) 

where s — {S,f ■ {u + /), . . . ' (" + /)). While the registers A and B in equation (|8.14p have been 

TO-qubit registers, here they contain only a single qubit each. Alice missing (to — l)-qubits have been 
traced out since they contained only classical information about her absolute syndrome (accessible to 
all parties). The rest of Bob's TO-qubit register now contains classical information about the relative 
syndrome s and is labeled B'. 
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Key Bit Measurement 

Finally, Alice and Bob both measure their key bit. Alice forgets about which bits she flipped by tracing 
out the A' register. The correlations between Alice, Bob, and Eve are described by the following 
semiclassical state: 



where [x]b — \x){x\b, etc. Note that the state is diagonal in Ei since the quantities • {u + /), 
i = l,...,TO— 1, and /2f • (u + /) are all classical: The former are already classical in (IS.lSp . the latter 
became classical after the key bit measurements by Alice and Bob. The {^f, . . . ,Cm-iiMi} span F™ 
thereby completely fixing the string u + f. 

The Mutual Information between Alice and Bob and Alice and Eve 

To calculate the quantum mutual information between Alice and Bob we trace out Eve and obtain 
= I Y^i^U ® ^Paqfix + Ml • {u + f)]B ® [{Ci ■ {u + f), 



= ^ Xlt^l-^ ® [x + Aif • u]b M • u, 1*2 • • • • )]b' 

X u 

= ^J2^x]A<S>Y,Pil"^^i^ + l"]B^[^B', (8.20) 

where ps is defined as pn = — p)™^" with p ~ p{l — g) + (1 — p)q. In the last step we used 
u = l^jlf + J27Li^ ^iVi to write the sum over ti as a sum over and s, where P is the logical X error, 
i.e. X error on the first qubit in the block; i. e. we have s) — Pz(i^ ,s)- This immediately yields 

/(A:y) = l- Pm2{P{m), (8.21) 

using the binary entropy H2{x) = — a;log2 x — {\ — x) log2(l — x). Note that I{X : Y) does not depend 
on the particular values {puv} in cab (see (|8.12D ). but only depends on the bit error rate p = pio +Pii. 
The form of the mutual information indicates the advantage provided by the syndrome. If Alice did 
not send any information, Bob's state would be averaged over the possible syndromes, and the mutual 
information would involve the entropy of the average of the P(P|s) rather than the average of the 
entropies. By concavity of entropy, the latter rate is larger. 

To calculate the quantum mutual information between Alice and Eve, we trace out Bob's systems 
and obtain 



with 



\Y.[x]A®pf^E,^ (8.22) 

X 

Pe!e2 = Xl^" ® and (8.23) 

U 

p(x),u ^ (^^j). ^8 24) 
f 

=^V^I^)- (8-25) 



147 



8 Quantum Cryptography 





z 


z 


I 


I 


z 


I 


z 


T 


z 


I 


1 


Z 




z 


I 


X 


I 



I 


X 


I 


I 


1 


I 


X 


I 


I 


I 


I 


X 



X X X X 



Figure 8.2: Cat code encoding one qubit into m = 4. The operators on the left hand side are the {XZ{0, )} 
(i = 1 . . . m — 1 from top to bottom) and XZ{0, fll), those on the right hand side are {XZ{f]f ,0)} and XZ(/2i , 0). 
The (generators of the) stabilizers are within the dotted line, the (generators of the) normalizers within the 
dashed one. 



It follows that the quantum mutual information between Alice and Eve is given by 

,,,'1 i-nvs 1 
PS \!^[ 



/(X:i?)= (8-26) 



We now restrict ourselves to the cat code presented in subsection 17.5.31 which is given by ('^f)j = 
5ij + Si+ij for z = 1 . . . m — 1, (flDj = Sij and {f]f)j = Si+ij for i — 1 . . .m — 1, {fxDj = 1 (see 
figure 18.21 which is the same as figure I7.1h l . This code leads to the correct coherent description of 
the syndrome calculation of the combined preprocessing scheme. The name comes from the fact that 
a\0, 0) + (3\0, 1) = a|00 . . . 0) + /3|11 . . . 1), a Schrodinger cat state when a — f] = For the cat code 
we obtain the probability distribution P[l^,s) in the mutual information between Alice and Bob by 
summing equation (j7.86p over P G {0, 1}, 

= (p^■(l-p^-^)l-'^(p"-^■(l-p)^)'^ (8.27) 

and by replacing p with p. 

We proceed with the computation of the mutual information between Alice and Eve for the BB84 and 
the 6-state protocol separately in the following two subsections. Before we step into these calculations, 
let us examine the special case q = which can be treated without specifying the protocols: In expression 
(|8.2ip for the mutual information between Alice and Bob we simply have to replace p with p. To calculate 
the mutual information between Alice and Eve given by (j8.26p . we note that is now a pure state. 

Using the fact that = 1 - 2P(P = 0|m), we find that 

I,^oiX:E)= J2 P{s,nH2{{P{n\^}). (8.28) 

Hence, we have the following theorem which already emerged as a result of Shor and Preskill's security 
proof in subsection 18.1.21 

Theorem 8.2.1. The secure key rate of the BB84 protocol [6-state protocol] involving only the syndrome 
calculation part of the combined preprocessing scheme is given by 

r,=o(™,p) = - min (l- ^(.?) ff4[iog,] ({P(^^ ^kl})) , (8.29) 



sew" 



where P(P,P|s) = P(l^ ,F , s)/ P{s} is the conditional error probability for the cat code, the joint proba- 
bility P{1^ , l^ , s) of which is given by equation (|7.86p . and the set T contains the Bell diagonal states char- 
acterized by the probability distribution {puv} = {^^'2'P+t,p—t, Ote[o.p] [{Puv} = {1~ fPi §' f ' f J'j'' 
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Remark (i). Note that (apart from the minimization) the secure rate of the above theorem is exactly 
the rate at which we can send quantum information rehably over a PauU channel characterized by 
the probability distribution {puv} when using a concatenation of a random outer CSS code with an 
inner cat code (see theorem 17.4.11 and the following remarks). Therefore, as we already mentioned in 
subsection 17.5.31 results on the maximum tolerable noise of the qubit depolarizing channel charac terized 



by{l — p, |,|,|} can be applied to the 6-state protocol if the factor 2/3 is taken into account [Lo01|. 
In particular it was shown in subsection 17. 5. 31 that the highest robustness is obtained for to = 5 leading 
to maximal tolerable bit error rate of Pmaxl*^ — 5, q — 0) — 12.6904%. As it will be shown later, the 
minimum for the BB84 protocol is achieved for independent errors, {(1 ~p)^,p{l — p),p^,p(l — p)}, and 
it turns out that the optimal block length is to = 7 leading to P^^'^{m ~ 7,q ^ 0) ~ 11.2107%. 

Remark (ii). If we use no preprocessing at all, we obtain the secure key rates from (j8.29p by setting 
to = 1, 

rq=o{m = l,p) = min (l - i?4[iog2] ({p™}) ) • (8.30) 

If we leave aside the minimization, this is exactly the rate at which we can send quantum information 
reliably over a Pauli channel characterized by the probability distribution {puv} when using a random 
CSS code (see theorem lTXSl and jlSJ])). For the BB84 protocol, the minimum is achieved for independent 
errors and we obtain the rate [SP00( 

rsp(p) = 1-2^2 (p). (8.31) 
Secure key generation becomes impossible for bit error rates higher than p^^'^jm = 1 , q = 0) = 



11.0028%. For the 6-state protocol, the minimization is obsolete. We obtain the rate Lo01 | 



rLo(p) = l-i?2(3p/2) + ^log2 3, (8.32) 

and secure key generation becomes impossible for bit error rates higher than p^|'^(to — l,q ~ 0) = 
12.6193%. 

BB84 

To calculate the secure key rate of the combined preprocessing scheme for the BB84 protocol, we must 
find the minimum over all aAB of the difference between the quantum mutual information between 
Alice and Bob and Alice and Eve. Since I{X : Y) does not depend on the particular structure of 
{Puv} = {1 ^ 2p + t,p — t,t,p — t}, t € [0,p], in aAB, but only depends on the bit error rate p = 
Pw +P117 this corresponds to finding the maximum of I{X : E). Let us assume for a moment that 
this maximum is achieved for independent bit and phase errors, i. e. we consider the state aAB with 
{Puv} = {1 ^ 2p + <,p — t, i,p — i} and t = p^ . In this case does not depend on -u, and we get 

pff ^[ZP'^YpXiZ^'^r (8.33) 
with ppq = {\ — q)\ip+){Lp+\+q\ip-){ip-\ and \^p±) — a/1 — p|0) ib^/p|l) . Part Ei and E2 of the state P^^Ie^ 



in (|8.23p are now completely decoupled. As it was shown in [SRS08l | , the fact that Ei is classical allows 
the corresponding state describing dependent errors to be reconstructed from this state: After tracing 
out the El part, we add an ancilla [Oj^g, apply the isometry X^u tr ^Psit?!^) -E3 (0| ® eventually 
dephase the ancilla. Since quantum mutual information never increases under local operations, the 
maximum of I{X : E) is indeed achieved for independent errors and (|8.26p becomes 

liX : E) = + i(Zpp,Z)«™) - mS{ppq). (8.34) 

Subtraction of (|8.34p from (|8.2ip gives the secure key rate: 
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Theorem 8.2.2. 

is given by 



The secure key rate of the BB84 protocol involving the combined preprocessing scheme 



r{m,p) 



1 r 
max — 
9 m 



-E 



P(s)H, 



:(P(P|S) 



Hpq 



-(ZppqZ) 



- mH2[^il + ^1 - 16p{l - p)qil 
Remark. Without the use of the cat code (i. e. if we take m = 1) the rate reduces to 



(p) = max 1 - H2{p) - H2{p) + H2 



+ ^l-l&p{l-p)q{l-q)) 




Omitting the maximization over q, the above formula (j8.35p gives the key rate rm.qijp) for some fixed 



values of m and g as a function of the bit error rate p. By setting rm.q{p) equal to zero, we find 
-Pmax*(™i 9)1 the maximum tolerable bit error rate for given m and q. For very high levels of added 
noise, i. e. for q ~ \ 

„BB84,'™ 1 



- e, we find that for all values of m, the key rate becomes zero at the bit error 
rate p'^^{m, q—^ — e) — 12.4120%, but by adding less noise at higher values of m, secret keys can be 



generated for even larger bit error rates (compare with figure 153)) . Figure WM shows plots of the key 
rates given by (|8.3ip and (j8.36[) (black) and the maximum over the key rates given by (|8.35p (red) for 
values of m up to 250. The increase of the maximal tolerable bit error rate with the block length m is 
illustrated in figure 18.11 The highest value of m for which we maximized the tolerable bit error rate as 
function of the added noise q was m = 500 leading to Pmax^C*^ — 500, q — 0.32656) — 12.9379%. 

By far the most difficult part in the numerical evaluation of (|8.35p is computing the von Neumann 
entropy, as it contains a sum of two m-fold tensor products of different one qubit density operators. 
Such an expression can be more efficiently calculated by taking into account its block diagonal structure 
which follows from permutation invariance, as detailed in the next subsection. 



6-State 

Since the set F only contains the single state {puv} = {1 ^ fP: §' 2 ' 2 minimization over aAB is unnec- 
essary and the secure key rate is directly given by the difference of the quantum mutual informations 
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BB84 
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Figure 8.4: Secure key rate r of BB84 for various types of preprocessing versus bit error rate p. No preprocessing 
corresponds to rsp, noisy preprocessing to rm=i, and the maximum over all block lengths m < 250 to rmax, 
shown in red. For the rates achieved by the blocklengths m = 1 and m — 250, the corresponding rate of the 
added noise is shown on the right y axis. 




between Alice and Bob (|8.2ip and Alice and Eve. Despite the simplicity of T, this calculation is more 
diffi-cult than BB84 due to the correlation between bit and phase errors. The corresponding conditional 
probabihties are given by p,u^i|„=o = 2{i-p) ^ P'^ Pv=o\u=o = l-p' andp.„|„^i = i. Therefore, denoting 
the number of ones in m as m and by reordering the qubits in such a way that the first u qubits are the 
ones with = 1, we get 



\u) 



.37) 



with |±) = ^(|0) ± |1)) and = ^\0) ± x/T^|l), leading to 

/ 

= (Z^^)^cr'^" (g) -y'»™-"(^^?)^ 



(8.38) 



with (T = (1 — q)[+] + and 7 = (1 — (j')[<;5y + q[(p'_]. Reordering the state in this manner does not 
change the entropy, and so will not alter the rate. Using these results the quantum mutual information 
between Alice and Eve (|8.26p can be expressed as 



u=0 



s 



(^cr®" (g, + i(ZcrZ)®" (g (^7^)®"- 

2(g) - (m - u)H2[^{l + v/1 - 16p'(l - P')q{l - q)))] ■ (8.39) 



Since a and ZaZ are diagonal in the same basis we are able to write the von Neumann entropy as 



E 



s 



{1-qrq 



k „u—k 



(8.40) 



which is of the same form as the von Neumann entropy in (|8.34p . Therefore the same methods for 
evaluation can be applied; see the next subsection. 
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14.6 



14.4 



14.2 



13.8 



13.6 - 



13.4 



Figure 8.5: Highest tolerable bit error rate p^iax of the 6-state protocol as a function of the added noise q for 
different block lengths m £ {1, 10, 20, ... , 90, 100}. 

Theorem 8.2.3. The secure key rate of the 6-state protocol involving the combined preprocessing scheme 
is given by subtracting (I8.39P from (I8.2ip . 



r{m,p) — max — 
q m 



1-E 



s=0 



m — 1 



P{s)H2{P{ns)) - I{X : E) 



Remark. For m = 1 the rate ^^A\\ reduces to [KGROa IRGK05 | 



r{p) — max 
1 



1 - H^iP) -J2p^ {Mpv\u) - H2{^{1 + v/l-16pi|«(l-Pi|„)<z(l-g)))) 



..41) 



..42) 



As it is the case for the BB84 protocol, the key rate becomes zero for all values of m for q 



(this 

time at bit error rate p^^^xi^i 9 = ^ ~ = 14.1119%), but again adding less noise at higher values of m 
gives rise to secret keys for even higher bit error rates (compare with figure [53]) . In figure we show 
the key rates in these special cases as well as the general case for optimal noise and blocklengths up to 
m = 125. Included are q — Q,m = 1 (black), q = 0,m = 5 (dotted), and m = 1 for the optimal q (black). 
The maximum over the key rates given by (|8.4ip for values of m up to 125 is shown in red, along with 
the specific case of m = 125. The increase of the maximal tolerable bit error rate with the block length 
TO is illustrated in figure ISTTl The highest value of m for which we maximized the tolerable bit error rate 
as function of the added noise q was m = 250 leading to p^f^{m — 250, q — 0.31210) — 14.5741%. Since 
the computation for larger blocksizes becomes rather slow, we extrapolated the value for the optimum 
noise leading to q Ki 0.31650 for m = 300. By calculating the highest tolerable bit error for this value 
of noise we get the best lower bound Pmax("^ — 300, q — 0.31650) = 14.5930%. It seems likely that 
for large blocklength (m « 500) the threshold of the 6-state protocol exceeds the lowest known upper 
bound on the threshold for the BB84 protocol (14.6447%). 



8.2.3 Evaluation of the Key Rates 

To evaluate the secure key rates of the BB84 and 6-state protocols given in theorems 18.2.21 and 18 . 2 . 31 for 
a certain set of parameters m, p and q, in both cases a von Neumann entropy of the form 

S{a-p'^'' + (3-{ZpZf) (8.43) 
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6-state 
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Figure 8.6: Secure key rate r of the 6-state protocol for various types of preprocessing versus bit error rate p. 
No preprocessing corresponds to tlo, noisy preprocessing to rm=i, and the maximum achievable rate over all 
blocklengths m < 125, to rmax, shown in red. For the rates achieved by the blocklengths m = 1 and m = 125, 
the corresponding rate of the added noise is shown on the right y-axis. The dotted rate with p^f^ = 12.6904% 
is due to Lo, corresponding to use of a repetition code of blocklength m — 5 and no noisy preprocessing. 



with a, (3 £ R, n E {1, 2, . . . , m}, and 

i Ppq = (1 - q)[^+] + ^b-] for the BB84 protocol 
P = \ (<5.44j 

[7 = (1 — + qif'-] for the 6-state protocol 



with |.^±) = ^|0) ± yr^|l), \ip'^) = VFIO) ± VI -_p'|l) and p' = p/{2{l-p)), has to be computed. 
In the foUowing we restrict ourselves to the BB84 protocol, the corresponding resuhs for the 6-state 
protocol are obtained simply by replacing p with p' . In the Bloch sphere representation, the density 
matrices p and a = ZpZ are represented by non-normalized vectors 



f± - (±2v/p(l-p)(l-2g),0,l-2p), (8.45) 



with r — \r± \ = y/l — 16p(l — p)q{l — q), such that 

P^^{l + r+-s), (8.46) 

a = i(X + f_.s), (8.47) 

where s = {X, Y, Z) denotes a vector containing the Pauli spin matrices. The vector r+ is obtained 
from r_ by rotating fL around the y-axis by the angle 9, 

If we diagonalize p and cr, we obtain 

p = UpgUl, g = d\ag{pi,p2}, (8.49) 

a = U^<;Ul <; = diag{CTi,a2}, (8.50) 

and the eigenvalues {pi, P2} and {ci, (T2} of p and a are both given by{(l-|-r)/2,(l — r)/2}. 
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To speed up the computation of von Neumann entropies of expressions like a ■ p®" + (3 ■ (ZpZ)^", we 
make use of their permutation invariance. As it is discussed in subsection ID . 2 . ll of appendix|Dl operators 
Uke p*^" become block-diagonal when expressed in the Schur basis. In other words, the reducible repre- 
sentation D{p) — p®"^ decomposes into a direct sum of inequivalent irreducible representations D^'^\p) 
labeled by a Young diagram where the irrep D^'^\p) occurs /iiy(S„) times and is of dimension h^{QL2): 

D{p) ^ = ^D^-\p)®I,,js,.y (8.51) 

In the qubit case, the summation over the Young diagrams v becomes a summation over the index j 
which ranges from ... ^ for even n and ^ ... 2: for odd n. The dimension of the irreps Z?^-'-' (p) is given 
by hj{Qi\-2) = 2j + 1 and they are spanned by basis states labeled by a 'Weyl tableau' k = —j, . . . , +j. 
Their degeneracy is given by 

/i,(S„)=f " ^ ,1^^^ . (8.52) 
\n/2-jJ n/2 + j + l ^ ' 

Diagonal density operators like g and can easily be expressed in the j-th representation, since they 
are diagonal in all these representations, too. The action of gi*^" on basis states of the Schur basis 
becomes simply a multiplication by powers of the two eigenvalues because of the symmetry properties 
of these basis states: Each basis state of the Schur basis labeled by a certain Young diagram j and 
Weyl tableaux k consists of a superposition of computational basis states which are permutations of 
|Ql^«'("i/2-i)|Q^«i(j-fe)|j^^«i(j+fc) independently of the Young tableaux (specifying degeneracy). Hence we 
obtain 

D<^^\g) = diag{prVf '(piP2)"/'-nfe=-....., (8.53) 

and an analogous expression for I?*^^^(<j). To obtain the desired non-diagonal block matrices D'^^\p) 
[D^^\a)\, we have to apply the unitary Up e SUa [U^ € SUa] in the irrep j onto D'^^^g) [D'^^H'^)], 

D^'\p) = D'^^\Up) ■ D^'\g) ■ D^^'\Up). (8.54) 



Since the SU2 C GL2 is locally equivalent to SO3 (see e. g. [Tun85[), the matrices D^^\Up) and D^^^Ua) 
are Wigner rotation matrices. In our case these Wigner matrices describe a rotation of ±0/2 around 
the y-axis (where is defined by eq. (|8.48p ') and are given simply by matrix exponentiation, 

D^^\Up) = eyip{-iJy ■ 9/2) D^^\Ua) = exp(+iJ;, • 61/2), (8.55) 

where Jy = (J+ — J_)/(2i) and J± denotes the usual angular momentum ladder operators. 



This way, 



J±\3, k) = v/j(j + 1) - Kk ± l)|j, A: ± 1). (8.56) 

n/2 

5(a-p®" + /3-a®") = hj{S.n)-S{a-D^^\p)+(3-D^^\a)), (8.57) 

J=0,l/2 

and it becomes feasible to calculate such expressions for values of n up to several hundreds. (Since we 
are only interested in the eigenvalues of aD^^^ (p) + (3D'-^'> (ct), in practice we might apply only a unitary 
which rotates by 2 x 6'/2 to D'^^^g) and leave Z?'^^'(^) in the diagonal form.) 



8.3 Iterated Preprocessing 

By combining local randomization with the cat code of size m, Alice and Bob gain an advantage over 
Eve and intuitively it seems this advantage might be even bigger by performing the procedure twice. 
In this section we discuss such a twofold iterated protocol where Alice adds noise at a rate q to ma 
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blocks of size mi each, and then after measuring the syndromes of these blocks, adds further noise at 
another rate Q to the TO2 'key' bits of these blocks. Then the syndrome of these m2 bits is measured 
and the remainder of the protocol proceeds as usual. We restrict ourselves to the BB84 protocol for 
simplicity. Using essentially the same argument as in section [8.2.2[ we find that we only need to consider 
independent bit and phase errors described by the state ctab with {puv} = {1 ^ 2p + — <,p — t} 
and t = p^: (i) I{X : Y) depends only on the bit error rate p = pio + pu, (ii) therefore we have to find 
the maximum of I{X : E), (iii) which is achieved for independent errors. The proof of (iii) works as in 
section [8.2.21 since, as we will see, Ei of (Jxe again classical. 

8.3.1 Rate Calculation 

We start with an m2 x mi-fold tensor product of a purification of (tab, |o')asI;' where \cr)ABE is the 
mi-fold tensor product which was defined in equation (j8.13|) . (we now denote m as mi). 

First Iteration 

The first step of the iterated preprocessing protocol is to apply the combined preprocessing protocol of 
the preceeding section to each of the TO2 blocks of size mi . As explained in subsection 18.2.21 after this 
step, the i-th block of size mi is given by (|8.18p . 

\^")aBE^ V^S.,.- XZb{pI ■ (Ur + fi),ril ■ V,)\<^ + )AB\f^)A^U^)E,Z^^,\v^)EM)■B', (8.58) 

where Si — (^f • {ui + /i), . . . , fmj_i • (ui + fi)) and we added the index i e {1, . . . , TO2}. 
Second Iteration 

After adding additional noise at rate Q to the key bit of each of the m2 blocks the state is described as 
W")abe^ E E ^Pn^A^lu XZB{r4 ■ {u^ + h) + F,,p^i- V,) \^+)ab 

fi,Ui,Vi ^"i- 

(S) \u^)EAZ'^^^'Zf^\v,)E2\s,)-B,\f,)^,\F,)^,, (8.59) 

with classical registers B', A' and A". Now we define the abbreviations U = {pf ■ {ui + fi) , . . . , pf ■ 
{um2 + fm2)) and V — (yPi ■ vi, . . . , fli ■ Vjn^) . Again Alice and Bob both measure their stabilizers 
(this time the cat code is of length m2), and Alice sends her result to Bob, who calculates the relative 
syndrome 5 = (^1 • (?7 + F), . . . ,^m2_i • {U + F)). Both then measure their key bit. The tripartite 
semiclassical state describing the correlations is now given by 

F fu...J„.2 ui,...,u,„^ 

X (^[x + L'']b «) [Sl, . . . , Srn2,S]B' ® [wi, . . . , UmslEi 

X 

i=l 

where |*) = ^jr Vp^\^ and = (6 • (S, + . . . ), 5 = (^i • (C/ + F), . . . ), and ^ pf- (U + F). Note 
that, as it was the case for (I8.19p . the state is classical in Ei since the quantities {si, . . . , Sm2, S, L^} 
are all classical; {5", L^} fixes U + F, and, since {si)j — ■ {ui + fi) = S^j ■ [ui + fi + Fi ■ 1), together 
with {si, . . . , Sma} the string {ui + fi + Fi ■ 1, . . . , Um2 + fm2 + Fm2 ' 1) is fixed (compare with figure 
18.71 which shows the stabihzers of the corresponding concatenated cat code). 
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The Quantum Mutual Informations 

To calculate the quantum mutual information between Alice and Bob we trace out Eve's systems and 
obtain 

= ^^Qf Y1 Pui---Pu^^^[x]A'»[x + L'']B'»[si...Sm2,S]B', (8.61) 



crxY 2 



using p = p{l — g) + (1 — p)q. Since Alice's additional noise / is now combined with Eve's noise 
u, f no longer appears in the the syndromes Si and S: Si ~ {^i ■ Ui, . . .) — {^i ■ {ui + Fi ■ I), . . 
S ^ i^i- 0' + F),...). Additionally, is now ^ fll ■ 0' + F), with U' = • mi, . . . , /if • 
Hence, 

(yXY = ^^[x\A® P'{ui,...,U,n:,)[x + L'']B®[si...S„,^J]B, (8.62) 

X U-i...Um2 

with 

m2 



P'iui, . . . = Y[[{1 ~ Q)pa, + QPs,+i] (8.63) 

i=l 

and Si = {^i ■ Ui, . . .), S = (^i ■ U', . . .) and ~ pf ■ U' , or, 

crxY [^1-4 «) ^ P'(si . . . s^2,S, L^)[x + L^]b «) [si . . . s„,2,S]b, (8.64) 



where the probability distribution P' {si . . . j L^) only depends on the number of ones in each of 
the syndromes si and 5* (we assume that the zeros and ones in S are ordered such that the syndromes 
Si, i G {1, . . . , TO2 — S}, correspond to Si = 0): 



7712— S 



p'iL^ = o,s,...sra2,s)= n [{i-pr'-'''f'ii-Q) + {i-prp"''-'''QY^ 



Yl [il~pr'p"^^-^^il-Q) + il-pr^-^'f'Q]. (8.65) 

■i— m2— 5+1 

The mutual information can therefore be written as 

I{X :¥) = !- P'{.si...s^^,S)H2{P'{L^\si... 8^2,3))- (8-66) 

In addition we see by the means of (|8.65p that for a given value of S only the frequency distribution of 
the Si, I S {1, . . . , m2 — S}, and the Sj, j G {m2 — S + 1, . . . , 7712}, matters. This fact can be used to 
speed up the calculation of the sum over the syndromes in (j8.66p . 

m2 — 1 S m2 — 1 / i\ Cj S "12 — 1 / , 

j: n "V s n "V 

S^O co,...,c^x-L-i^O j^O \ -J / ao,...,a,„^_i^O j^O ^ 
s.t.^^Ci— m2 — 5 s. t. y^^- aj—S 

P'{s,...s,n2,S)H2{P'{L-\si...s„,2,S)), (8.67) 

where (si, . . . , Sm2-s) contains cq x 0,...,c„ij_i x mi — 1, and (sm2-s+ii 5)712) contains ao x 
0, . . .,ami~i X mi - 1. 

Tracing out Bob's systems from (I8.60p . and writing the resulting state as in (|8.22p - (l8.24p . we obtain 



Pe- 



(x),u,...u„,, ^ ^^^rmm2y _ Q)p»"n _^ Q(ZppqZ)«^™i]®"'(Z^"i™^)^, (8.68) 
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Figure 8.7: The concatenated code for the iterated preprocessing of size mi = 4 and m2 = 3 encoding 
one qubit into n = mi x m^. The operators on the left hand side are the {Zi}i^i,.,„ with Zi — XZ{0,^i) 
for 1 < i < n — 1 and Z„ = XZ{0, fl^), those on the right hand side the {Xi}i=i...„ with Xi = XZ{fff,Q) for 
1 < j < n — 1 and X„ — XZ{fr ,0). The (generators of the) stabilizers are within the dotted line, the (generators 
of the) normalizers within the dashed one. 



which does not depend on the strings ui . . . u,„2 and the mutual information between Alice and Eve 
(|8.26p can be seen to be 

I{X : E) = S[^[{1 - Q)p^r +Q(Zpp,Z)«™^]^"^ + l[Qpfr + (1 - Q){Zp,,Zf"''f"'') 

- m2S{{l - Q)pf^' + Q(Zpp,Z)^^') (8.69) 

Once more the secure key rate is given by the difference of these mutual informations. 

Theorem 8.3.1. The secure key rate of the BB84 protocol involving the iterated preprocessing protocol 
of size m2 x mi is given by 

r{mi,m2,p) = max— (J(X : Y) - I{X : E)) , (8.70) 

q,Q 77117712 

where the mutual informations are defined in (j8.66p and (j8.69p . 

Again the hardest part in the numerical evaluation of (j8.70p comes from the von Neumann entropies. 
One contains a sum of two m2-fold tensor products of different density operators, but this time these 
density operators are T^i-qubit density operators. For more details on the evaluation of (|8.70p see the 
next subsection. 

We compare the resulting key rate of the ttii x m2 = 3x3 iterated code with the key rates of the non- 
iterated codes of blocksizes m G {9, 10, 11} in figure [5751 The entire rate curve of the 3x3 code shifts to 
higher values than the single round 777 = 9 code, while the total amount of noise gtot — '?(1~Q) + (1^'7)Q 
added to the sifted key bits is essentially the same as in the case of one round, showing that the 
improvement comes from making better use of the same amount of noise. 

8.3.2 Rate Evaluation 

As it was the case for the non-iterated preprocessing protocol, to evaluate the mutual information 
between Alice and Eve (given by (j8.70p ) von Neumann entropies of the form 

S'(a-p«®"-f /?• (ZpZ)^") (8.71) 
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Figure 8.8: Secure key rate r of BB84 with iterated preprocessing of size mi x m2 = 3x3 versus bit error 
rate p. The right y-axis shows the corresponding values of added noise in the first (q) and second iteration (Q) 
as well as values of the total amount of added noise {qtot = g(l ~ Q) + (1 — <l)Q, red). For comparison, the rates 
of the non-iterated protocol are shown for blocksizes m £ {9, 10, 11} (dashed lines). The corresponding values 
of added noise for these cases are also shown (dash-dot lines). 




have to be evaluated. This time, in addition to the case where p is a qubit density operator, there is 
also the case where p is a qudit density operator of dimension 2™^ . Such an expression can also be 
calculated more efficiently by taking into account its permutation invariance (see subsection 18 . 2 . 3^ . 

5(a-p^" + /3-a^") =^ K{S„)-S{a-D'^''\p)+fi-D^''\a)), (8.72) 

(with a = ZpZ) but now we cannot determine the irreducible representations Z?''^' (p) by matrix multipli- 
cation from their diagonal counterparts D^'^\q), because there is no simple way to determine the repre- 
sentation matrices of SU2'ni for mi > 1. Therefore, we explicitly calculate the Schur basis 1 1 wj'^'^ Y m^ ) | 
(see section ID?2|) of n qudits of dimension 2'"^ with the help of the eigenfunction method CPW02| . and 
obtain 

Wi'^Yi^^) = [^Sch].'i;55'Ni---'U- (8-73) 

Then we determine the matrix elements of both the D'^^^{p) and the -D'^'^^(cr) blocks by using the Schur 
basis states (|8.73p . 

E E [f^Sch]r^2"'[f^SchC5j^ (8.74) 

for some arbitrary Young tableau Ym^ which specifies the degeneracy of the irreps v of GL2">i . 

For example, to calculate the key rate of the mi x m2 = 3x3 case presented in the last subsection, 
we calculated the Schur basis of 

Hr = span{|T^ifl))}^.^^^^^^^^0|yJfl))0 

span{|<^^l))}^.^^ ^^^«span{|riif^^»)}^^^ ^0 

span{|<^^-^l))} ^ir^i^i-iD), (8.75) 

^ J 7 — 1. ..56 
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and the calculation of the eigenvalues of a 512 x 512 dimensional matrix in (|8.7ip reduces to a calculation 
of the eigenvalues of three matrices of dimension 120 x 120, 168 x 168 and 56 x 56 in (j8.72p . 

It may be possible to further streamline the calculation by taking into account the fact that the qudit 
inputs to the second round are block-diagonal themselves. Hence more sophisticated representation- 
theoretic methods, in particular a Clebsch-Gordon decomposition of the states input to the second 
preprocessing round, should make the analysis of more rounds and larger blocksizes tractable. 
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A Tables of Difference Schemes and Orthogonal Arrays 



In this chapter of the appendix we list difference schemes based on F| and orthogonal arrays with 
four levels. Orthogonal arrays OA{nc,n,2,4) with four levels and strength two can be used to build 
decoupling schemes of length ric for any Hamiltonian Hq describing a network of up to n qubits with 
arbitrary qubit-qubit couplings. If the couplings involve only terms of the form J"!^ Xi^Xj + Jy^Yi^Yj + 
•Pj Zi (X) Zj, decoupling schemes of smaller length can be obtained from difference schemes D{nc,n,A) 
based on Fj. The decoupling schemes {gj}l^Q are obtained by setting 

Um„ j+i J where my denotes the matrix elements of the corresponding orthogonal array or difference 
scheme, and the set {u^lf^g denotes the set of Pauli operators 1^2 = {I, X, Y, Z}. (Alternatively, in the 
case of an orthogonal array, any nice error basis may be chosen to form the set {wilf^o)- 



A.l Difference Schemes 



For an overview over construction methods and lower bounds on t he maxi mal number c e {2, 3, . . . , 4A} 
for which a difference scheme D{AX, c, 4), A G N, exists, we refer to |hSS99I . chapter 6] . We list difference 
schemes D{AX, 4A, 4) for A = {1, 2, 3, 4} in tables lA.ll - IA. 41 The entries {0, 1, 2, 3} are to be understood 
as elements in F|, = (0, 0), 1 — (1, 0), 2 = (1, 1), 3 = (0, 1). Note that all schemes are symmetric with 
respect to their matrix ind ices, i. e. = rriji. The difference schemes in tables [K7l\ and [A. 21 are the 



rriij = rrij 

same as those presented in SMOlJ, the schem es in ta bles lA.3l and lA.4l have been obtained by the author 
via a computer search. It was conjectured in SMOll ] that schemes -D(4A,4A,4) may exist for all A e N. 
For A = 5 at the current time only a lower bound of c > 10 is known. 



A. 2 Orthogonal Arrays 

We list orthogonal arrays 0^(16,5,2,4), OA(32, 9, 2, 4), and OA(48, 13, 2, 4) in tables [X5]-HJ1 The 
arrays are constructed using th e differe nce schemes listed in tables ETD - I A. 3l in connection with the con- 
struction method described in corollary 6.20], which, for a given difference scheme D{nc,n,4:), 
leads to an OA{4tIc, n + 1,2, 4). As a result, the upper left (n — 1) x (n — 1) corner of any of the listed 
orthogonal arrays of the form OA{nc,n,2,4:) is identical to the corresponding difference scheme. 
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Table A. 2: 0(8,8,4) 
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Table A.5: 0^(16,5,2,4) 



























1 


1 


1 


1 


1 


1 


1 


1 


2 


2 


2 


2 


2 


2 


2 


2 


3 


3 


3 


3 


3 


3 


3 


3 








1 


1 


2 


2 


3 


3 


1 


1 








3 


3 


2 


2 


2 


2 


3 


3 








1 


1 


3 


3 


2 


2 


1 


1 











1 


2 


3 





1 


2 


3 


1 





3 


2 


1 





3 


2 


2 


3 





1 


2 


3 





1 


3 


2 


1 





3 


2 


1 








1 


3 


2 


2 


3 


1 





1 





2 


3 


3 


2 





1 


2 


3 


1 








1 


3 


2 


3 


2 





1 


1 





2 


3 





2 





2 


3 


1 


3 


1 


1 


3 


1 


3 


2 





2 





2 





2 





1 


3 


1 


3 


3 


1 


3 


1 





2 





2 





2 


1 


3 


1 


3 





2 


1 


3 





2 





2 


1 


3 


2 





3 


1 


3 


1 


2 





3 


1 


2 





2 





3 


1 





3 


2 


1 


3 





1 


2 


1 


2 


3 





2 


1 





3 


2 


1 





3 


1 


2 


3 





3 





1 


2 





3 


2 


1 





3 


3 





1 


2 


2 


1 


1 


2 


2 


1 





3 


3 





2 


1 


1 


2 


3 








3 


3 








3 


2 


1 


1 


2 








1 


1 


2 


2 


3 


3 








1 


1 


2 


2 


3 


3 








1 


1 


2 


2 


3 


3 








1 


1 


2 


2 


3 


3 



Table A. 6: 0^(32,9,2,4) 



000000000000 
000111222333 
000222333111 
012123013023 
012231130302 
012312301230 
023013231012 
023130312201 
023301123120 
031032021321 
031203102213 
031320210132 
000111222333 



111111111111 
111000333222 
111333222000 
103032102132 
103320021213 
103203210321 
132102320103 
132021203310 
132210032031 
120123130230 
120312013302 
120231301023 
000111222333 



222222222222 
222333000111 
222000111333 
230301231201 
230013312120 
230130123012 
201231013230 
201312130023 
201123301302 
213210203103 
213021320031 
213102032310 
000111222333 



333333333333 
333222111000 
333111000222 
321210320310 
321102203031 
321021032103 
310320102321 
310203021132 
310032210213 
302301312012 
302130231120 
3020131232 1 
000111222333 



Table A.7: OA(48, 13, 2, 4) 
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This chapter p resents quantum algorithms implem enting quantum maps like the quantum sawtooth 



map 



BCMSOlj and the quantum tent map |FFS04| . These algorithms have been used in this thesis to 
study the error suppressing properties of the PAREC method in section \S7I\ and the embedded recoupling 
scheme in chapter|3]by means of numerical simulations. A more elaborated discussion of such algorithms 
can be found in the author's diploma thesis ^Ker04 , chapter 2]. Furthermore, we define a discrete Husimi 
function which can be understood as the coherent state representation of a quantum state, and which 
can be used to illustrate quantum states. 



B.l Quantum Gates 

Before we are going to derive a decomposition of a quantum map into a sequence of elementary one- and 
two-qubit gates, we have to define these gates. Each of the one- and two-qubit gates will be represented 
in the standard computational basis {|0), |1)} and {|00), |01), |10), |11)}, respectively. Let us start with 
the one-qubit gates. 

B.1.1 One-Qubit Gates 
Phase Gate 

The phase gate Ptif) applies a phase ip if the t-th qubit is in the state 















-HI 









Hadamard Gate 

The Hadamard gate Hj generates a superposition of |0) and 



H 



4^ 



1 1 



^2(1 -1 



B.l. 2 Two-Qubit Gates 
The Controlled-Not Gate 

The controUed-not gate CNOTct flips the state of the target qubit t if the control qubit c is in the 
state 

— f— /I 0\ 

" 10 

^ 1 
^ \0 1 0/ 
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The Controlled-Phase Gate 



The controUed-phase gate CPciC2 applies a phase if if the control qubits ci and C2 are both in the 
state 11). 



/I \ 

10 

10 

VO e"^y 



A three-qubit controlled phase gate CCPciC2C3 might be defined in a similar fashion. 
The Swap Gate 

The swap gate SWAPt^t^ exchanges the state of the target qubits ti and t2- 

— ¥ — 



















1 








1 








Vo 








1/ 



B.2 Gate Decompositions for Quantum Maps 

Let us consider a quantum computer consisting of n qubits. The Hilbert space Ti — Tif" spanned by the 
computational basis {|zo, zi, . . . , with ij G {0, 1} for j = 0, 1, . . . , n — 1, is of dimension d — 2". 

A short hand notation of the basis states is given by \i) — \io, ii, . . . , with i ~ h ' We 

are going to construct a decomposition of a quantum map 



U exp(--m2r) exp(-ifcy(g)), 



(B.l) 



characterized by the parameters T — 2t: /d and A: e M, into a sequence of elementary one- and two-qubit 
gates defined in the preceding section. Here, m denotes the momentum operator whose eigenstates 
form the computational basis, m\i) — and q denotes the position operator which is related to the 
momentum operator via the quantum Fourier transform (QFT): 

27r 

q = J/qp^ • — m • [/qft- 

As a consequence, the quantum map can be written as the product of four unitaries 

U = exp(^-^TO^r^ • [/qpt • exp(^-iA:y(^m)^ • Uqft- 

Each of these unitaries, the QFT [/qft, the kick operator exp(— ifcy(27rTO/(i)) , the inverse QFT and 
the free evolution operator exp(— ^to^T), can be decomposed into a sequence of elementary one- and 
two-qubit gates. We present gate decompositions for the kick operator employing the sawtooth-potential 



(B.2) 



(B.3) 



-ig(g-7r) , < g < tt 

i(g - 7r)(9 - 27r) ,7r<9<27r 



and the tent-potential 

Vtont(g) 

The classical map corresponding to the quantum map (|B.ip is given by 

p'^p-KV'{q) (mod 27r) 
q' = q+p' (mod 27r) 
and depends only on the single parameter K — kT . 



(B.4) 



(B.5) 



(B.6) 
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4H H 
3- 
2- 



H 



H 



H 



H 



Figure B.l: Quantum circuit of tlie quantum Fourier transform for n = 5 qubits. 



B.2.1 The Quantum Fourier Transform 

If we let the quantum Fourier transform (QFT) reverse the order of the qubits, i. e. if 

1 In 

C^qft|?wo) (g) |toi) «)•••«) |m„_i) = —j='^exp{i^mx^ \xn-i) ® ■ 



\Xi) ® \Xo) 



(B.7) 



x=0 



a decompos ition o f C/qft into n{n + l)/2 quantum gates (Hadamard gates and controlled-phase gates) 
is given by EJ9d | 

Uqvt= f{ (( n CPr.(^))H,), (B.8) 



j—n—l \ 



where the product over j is non-commutative and has to be apphed starting with j — n—l. A 
corresponding quantum circuit for n = 5 qubits is depicted in figure IB. II The inverse operation f/qpx 
is obtained from (jB.Sp by multiplying each phase by the factor minus one. 



B.2. 2 The Free Evolution Operator 

The free evolution operator exp(— |m^r) is implemented by a series of controlled- and uncontrolled- 
phase gates. Using the binary representation m = X]J=o "^J ' ' obtain 

n-l 

exp^-^m^T^ =:exp(^-iT ^ m^m^T'+'"~^^ 

v,w—0 

= Yl exp (-irTO„22^"i) Y[ exp (-irTO„m^2"+"') , 
which translates to a series of n{n + l)/2 phase gates as follows: 

n — 1 n — 1 

n P.(-r22"-i) [] CP,„(-T2''+"'). 



(B.9) 



(B.IO) 



v=0 



B.2. 3 The Kicl< Operator 

The gate decomposition of the kick operator eyiY>{—ikV{2nm/d)) depends on the detailed form of the 
potential V . We start with the sawtooth potential given by (|B.4[) and proceed with the tent potential 
given by (jB.Sp . 
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Figure B.2: Husimi function of the quantum sawtooth map with parameters K — kT — —0.1 and T = 27r/2": 
for n = 8 qubits (left) and n = 12 qubits (middle). Classical trajectories (right). 



Sawtooth Map 

The kick operator of the sawtooth map is given by 

exp^j— (^— TO — TTj j ~ expyi—p—m j expy—i — ^ — TOjexp|^i— ^J. (B-11) 
Omitting the global phase, this translates into the sequence 

n + 1^2^-) n CP..(^5^2-) (B.2, 

V— v<.w 

consisting of n{n + l)/2 phase gates. 

Hence, in total, the quantum algorithm implementing the quantum sawtooth map consists of Ug = 
4 X n(n + l)/2 = 2n(n + 1) elementary quantum gates. The algorithm presented in t his section 
is an improved version of the algorithm proposed by Benenti et. al. in [BCMSOlt and [BCMSOSt 



which makes use of a four-phase two-qubit gate which applies an individual phase to each of the states 
{|00), |01), |10), |11)} and consists of the larger number of "in^ + n quantum gates in total. As an 
example, let us apply the sawtooth map U with parameters K — kT = — 0.1 and T = 27r/2" on the 
initial state |^) — \ [0.38 • 2"] ). Figure [BT2] shows the average of the Husimi function of the state C/*|5') 
taken over 950 < t < 1000. The calculation was performed for n = 8 (left part) and n = 12 qubits 
(middle part). The color gradient encodes the function values ranging from (blue) up to the maximal 
value (red). For comparison, there are also 1000 classical trajectories depicted (right part) starting in 
the range (0 < q < 2tt,p « 0.38 • 2tt) and resulting from 2000 iterations of the classical map (jB.6p . 

Tent Map 

Setting q(q) = q if < q < ir and q(q) = q — TTifTr<q< 2tt, the tent-potential becomes 

Vtcnt {q{q) ) = < , ^ ^ • (B.13) 

[ + ^q(q-TT) ,7r<(7<27r 

In order to implement the kick operator exp(— ifcVtont(27rTO/(i)), we start by applying the operator 
exp(ifcig(g — tt)) — exp(i^^5-"^^) exp(— i^^rn) , where to = J2]Zo "^i ' ^'^ does not depend on the most 
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significant qubit in position n — 1. This operator translates into the following sequence of phase gates: 

"n + ^^'-l n cp...(i5^2.«) (B.14, 

v—O v<w 

Since states with q > tt should have been multiplied with exp(^—ik^q{q — tt)) instead, the next step 
is to apply the operator exp(^—ikq{q — tt)) onto all such states. This can be done by using the same 
gate sequence as in (IB.14|) . if each phase is multiplied by the factor —2, and each gate is additionally 
controlled by the most significant qubit in position n — 1 : 

n CP«-i. (^2" - ^2-) n CCP„_r.,. {-'-^r--) . (B.15) 

^=0 v<iw 



The three-qubit gate CCPciC2C3 can be implemented by the following five qubit sequence: 

CCPe,c.c3 = CP,,,,(|)cPc,c3(|)CN0Te,e3CP,,e3(-|)CN0T,,,3. (B.16) 

As a consequence, the kick operator of the tent map is decomposed into 3n^ — 7n + 4 elementary one- 
and two-qubit quantum gates. 

In total, the quantum algorithm implementing the quantum tent map consists of = 3 x ri(n + 
l)/2 + 3n^ — 7n + 4 = — -^n + 4 quantum gates. It was originally proposed by Frahm et. al. 



m 



FFS04| | . As an example, let us apply the tent map U with parameters K = kT = 4/3 and T = 27r/2" 
on the initial state |^) = (| ) + | 2"~^ ))/\/2. Figure [BT3] shows the average of the Husimi function 
of the state J7*|5') taken over 950 < t < 1000. The calculation was performed for n — 8 {left part) 
and n = 12 qubits {middle part). For comparison, there are 1000 classical trajectories shown {right 
part) starting in the range {0 < q < 27r,p g {0, tt}) and resulting from 2000 iterations of the classical 
map ((R6|) . 
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Figure B.4: Husimi function H{q,p) of the 
coherent n = 4 qubit state |4'(4, 4)). 



B.3 Coherent States and the Husimi Function 

Let us consider a quantum register consisting of n qubits described by a Hilbert space H — Tif" of 
dimension d = 2". A coherent state in position {0 < q < d,0 < p < d) is defined as 



d-l 



j=0 



TT 

d' 



(B.17) 



Here, D{j,p) denotes the difference j — p mapped to the range —d/2 < D < d/2: 

DU,P) = (j -P+^ (mod dij - ^. 



(B.18) 



The state is normahzed in the Umit of large d . A quantum algorithm which prepares a coherent 

state in good approximation can be found in PRS04 1 . 

The Husimi function H{q,p) of a quantum state — J2jZo is defined as the absolute square 

of the inner product between jvP) and a coherent state \^{q,p)): 



d ' ' 



f, 1 d-l 
J=0 



27r 



,exp^^— J9- -D 0>) ) *j 



(B.19) 



According to the above f ormula, a calculation of all d^ values of H{q,p) takes 0{d^) steps. As it 
was recognized in FFSOJ|, this calculation can be accelerated substantially by noting that a Fourier 
transformation is involved in expression (|B.19[) : Let us rewrite the equation as 



H{q,p) = 



i:(.i;;3i:-p(¥-')h(5)*»K-5'''<-))]io 

q'=0 V U 



('?IE*.'k') 

q'=0 



(B.20) 



where the vector with entries ^'q' denotes the Fourier transform of 



3=0 



(B.21) 
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B.3 Coherent States and the Husimi Function 

By calculating the fast Fourier transformation for the d vectors j^*') associated with p E {0,1, . . . , d— 1}, 
all values of H{q,p) can be obtained in only ©(d^ log2 d) steps. In the limit of large d, the function 
values of the Husimi function add up to one: 

d-l d-l 

= (B.22) 

p=0 q=Q 

As an example, the Husimi function of the coherent n ~ 4 qubit state |$((i/4, (i/4)) is depicted in 
figure El 
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B Quantum Algorithms for Quantum Maps 
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C Technical Results 



This chapter of the appendix contains various technical results which are referred to in part II of this 
thesis. The first section proves some counting lemmas for linear codes, the second section proves the 
existence of good self-orthogonal codes, and the third section proves some lemmas concerning a Bell 
state. 



C.l Linear Codes 

This section provides two corollaries which are needed for the proof the random coding arguments in 
subsections 15.4.31 and 17.3.21 

Let us denote the set containing all [n, k]q codes by 

An,k,q = {C C I C is an [n, fc],-code}, (C.l) 

and let us denote the subset of codes in A„^k,q which contain a certain nonzero codeword x £¥^ hy 

An,kA^) = {Ce An,k,q \SeC}. (C.2) 

Lemma C.1.1. The total number of [n,k]q codes is given by 

\An,k,q\^ \\T_V\ .[ (l<fc<n) (C.3) 
and \Anfi^q\ — 1. The number of [n, k]q codes which contain a certain nonzero vector x is given by 

\An,kAx)\ ^ Wl=_Y^ \[ {l<k<n), (C.4) 
and \ An_i^q{x)\ — 1, |A„.o,g(x)| = independently of x j^O. 

Proof. To determine the total number of [n, k]q codes, we have to count all possibilities to choose k 
linearly independent vectors from F^. There are — 1 candidates for the first vector, there remain 
— q for the second, 5" — for the third, and so on. We therefore get in total N — (g" — q^){q'^ — 
q^) ■ ■ ■ (g" — q^~^) possibilities. Since many of these selections of k vectors span the same codespace, we 
have to divide N by the number of ways a set of k generating vectors can be found for a fc-dimensional 
subspace. This number is (g*^ — q^){q^ ~ q^) ■ ■ ■ {q'' — '?*'~^)- The number of linear codes containing a 
particular nonzero x can be found in a similar fashion, but now as first independent vector we choose 
X itself. □ 

Corollary C.l. 2. One obtains from the above lemma that for any nonzero x € F" 

\An.kA^)\ ^ q'-l ^ 1 
\An,k,q\ g" - 1 - 

The following lemmas are slight generalizations of lemma IC.l.ll 
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Lemma C.1.3. Let IC be an [n, K\q code and let 

An,kA>^)={C eAr^,k,q\IC^C} 

be the set of all [n,k]q codes which contain IC. Then, 



< k < n), 



and |A„,«,,(/C)| = I, |A„,fc,g(/C)| = for {k < k). 
Lemma C.1.4. Let IC be an [n, kJ^ code and let 

An,k,q{IC,x) = {C e An^k.q \ IC ^ C and X e C} 
be the set of all [n, k]q codes which contain IC and a certain nonzero vector x G F". Then, 

\An,k,qilC)\ ifxeIC 

illll^^^,^, — ^ if X 4 IC and k + I < k < n 

\Ar.,kAic,x)\ = { nti+,(.'=-9') 'J 

1 if X ^ K, and k + 1 = k 







else 



(C.6) 



(C.7) 



(C.8) 



(C.9) 



Corollary C.1.5. Let IC be an [n, n — ki\q code and let ( • 
codes. Then, 



denote the average over all such 



\An,n—k2,qi}^^ ^)l 
\An,n-k2,q{IC)\ I K;eA„,„_fcj 



n— fe2 



- 1 1 



< 



(C.IO) 



Proof. 



E 



(/C,x)| 



We use lemma fC. 1 . 3 1 and IC . 1 .41 and obtain 



I -^n,n— All ,g I 



E 



,ii X € IC 
else 



^ |A„,„_fc„,(i-)| ^ qn-k2_qn-k, \Ar,^„_,^^q{x) 



\A 



n,n— fci .q \ 



\Afi_n—ki ,q I 



Corollarv IC . 1 . 21 tells us that \An,n-ki.q{x)\/\An^n-ki.q\ — — ^ 1) which leads to the desired 

result. □ 



C.2 Self-Orthogonal Codes 

In this section it is shown that good self-orthogonal codes do exist. A self-orthogonal g-ary linear [n, k]q 
code C over the field is a code which is contained in its dual [n, n — k\q code C^. A code C is called 
self-dual provided that C = (in this case n has to be even and k = n/2). Self-orthogonal [n, k]q codes 
can be used to construct quantum CSS-codes encoding k = n ^ 2k qudits into n. If has minimum 
distance d, C has to be at least of the same minimum distance. Hence the quantum CSS-code will be 
of distance d. 
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C.2 Self-Orthogonal Codes 



In the foUowing subsections, a Gilbert- Varshamov lower bound is established, which guarantees the 
existence of self-orthogonal [n, k, d]q codes such that the dual [n, n — k, d]q code has minimum distance 
d and rate 

n 11 &cii y q _ I g— 1/ 

For the binary case {q = 2) this result was found by Calderbank and Shor [CS96|. The corresponding 
proof is given in the first section. The nonbinar y case (o > 3) has to be treated separately. It is proven 
in the second section using results presented in Ham04| . 

C.2.1 The Binary Case 

Lemma C.2.1 ( jcS9d |). For even n > 2 and < k < n/2, let 

Ain, k) = {CC \C is a [n, k]2-code, {0, 1\<ZC<ZC^] (C.12) 

be the set of all self- orthogonal [n, k]2 codes which include the [n, 1]2 subcode {0, 1}, and let 

As^{CeA{n,k)\xeC^} (C.13) 

be the subset of A{n, k) including only those codes whose dual codes include x G . Then, there exists 
a constant Tq satisfying \As\ = Tq for any x £ ¥2 with x ^ 0, x ^ 1 and x ■ x ^ (mod 2). 



Remark. For a proof we refer to CS96[. Note that for all x G C^, wt(af) — (mod 2) which follows from 
1-^=0 (mod 2). (By 1 we denote the vector (1, 1, . . . , 1) G and analogously = (0, 0, . . . , 0) G F^.) 

Theorem C.2. 2. Consider the set of codes $ = {C^ \ C G A{n, k)}. Then, as long as 

s=l ^ ^ 

there exist codes of minimum distance d in ^. 

Proof. Counting all vectors x (except x — and x = 1) in <I> in two different ways, we get (by noting 
that |$| = |A(n, k)|) 

\A{nk)\ ■ {T-^ - 2) = (2"-i - 2) • Tq. (C.15) 

There are Y^lt^'^~^ (2I) nonzero vectors of even weight less than d. These vectors are distributed over 
^2s^d-i ^n^-^ codes at most. As long as this number of codes is smaller than \A{n, k)| (the total 
number of codes in <&), there have to be codes in $ which are at least of minimum distance d. □ 

Corollary C.2. 3. Consider the set codes $ = {C^ | C G A{n, k)} . Then, as long as 

""^ < l-i72(rf/n), (C.16) 



n 

there exist codes of minimum distance d in ^. 

Proof. The tail inequality gives an upper bound for the left hand side of (|C.14p : 



2s<d-l , . d-l 

n \ \ ^ / n 



3=0 



A lower bound for the right hand side of (|C.14[) is given by 2" ^/2" ^. Hence, as long as nH2(d/n) + 
n — k < n — 1 condition (jC.14p will be satisfied, too. For large n this leads to condition (jC.16p . □ 
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C.2.2 The Higher Dimensional Case 



Lemma C.2.4 (|HamQJ|). Forq>3 let 

A{n, k) = {CC FJ^ \C is a [n, k]q-code,C C C^] (C.17) 

he the set of all self- orthogonal [n, i<\q codes, and let 

As = {C e A(n,/c) I f e C-L} (C.18) 

he the subset of A{n, k) including only those codes whose dual code includes x ¥^ . Then, for any 
u G Fg, there exists a constant r„ satisfying \ As\ = T^ for any nonzero G with x ■ x ^ u (mod q). 

Remark. For a proof of t he abov e lemma we refer to jHamOj . Lemma 1]. The following theorem is 
proven using results from lHam04 , Corollary 1] . 

Theorem C.2.5. Consider the set of codes $ = {C^ \ C G A{n, /()}. Then, as long as 
there exist codes of minimum distance d in 

Proof Let Su = {x e F^|f -x = u (mod q),x ^ 0} for u G F,. It follows that |S'„| > - 1 

since the first n — (7 + 1 digits of any x € Su can be set in arbitrary manner (except to (0, . . . , 0)). 
Counting pairs {x,C) such that x ■ x — u (mod g), a? 7^ 0, and x G G we find that (noting that 
|$| = |A(n,k)|) 

|5J-T„< |A(n,k)|.(q"-^-l) (C.20) 
and we get (using the upper bound on \Su\) 

-^"'^"^ - 1 < M!^. (C.21) 

There are ^ '^Y nonzero vectors of weight less than d. These vectors are distributed over 

Yl'j=i ^ ■ ™ax„{T„} codes at most. As long as this number is smaller than \A{n, k)|, there 

have to be codes in <i> which are at least of minimum distance d. Because of (|C.21I) . equation (|C.19[) is 
a sufficient condition. □ 

Corollary C.2.6. Consider the set of codes $ = {C^ | C G A{n, k)}. Then, for large enough n, as long 



k d/n din 

<1- H, ' ' 



,Po.,,(l-^,^,...,^) (C.22) 
^ V n a — 1 0—1/ 



n 11 &5J 72 g _ 1 q — 1, 

there exist codes of minimum distance d in 

Proof. By using the Chcrnoff bound 11.2.11 it was shown in the proof of corollary 15.2.31 that an upper 
bound for the left hand side of (jC.19p is given by 

% (;■) <" - < (1 - i-^r • ^)) ■ 

A lower bound for the right hand side of (|C.19p is given by 

„n-(3+l _ 1 

^ < \n-. 1 ■ (C-24) 

Therefore, as long as 

" - k I d d/n d/n \ q-l 

< 1 - -Hgpog 1 1 1 , r, • • ■ , , (C.25) 

n ■Jisqjy n q — 1 q — 1 / n 

condition (|C.19p will be satisfied, too. For large n we can neglect the g — 1 term. □ 
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C.3 Bell State Lemmas 

We are going to prove two simple lemmas concerning the Bell state |<i>)yis = Sj=o \jj)AB that 
are relevant in chapter[51 Here, — ® Ij)^; where {|«)^}j=o,...,g-i and {\j)B}j=o,...,q-i denote 

orthonormal bases of the g-dimensional Hilbert spaces Ti.A and Ti. b , respectively. 



Lemma C.3.1. Let 1$)^^ = 7f E.-=o b'j'W- Th 



en, 



Oj®lB\<i>)AB=^A®OB\<i>)AB^ (C.26) 



if the transposition is with respect to the {Ij)^} basis and Ob has the same matrix elements with 
respect to the {Ij)^} basis as O4 with respect to the basis, i.e. = ^ij\^)AAi^\ "''^'^ 



Proof. We obtain 



ij 

= ^J^O,,\i)BBQ\Y.\^)A\k)B 



^Ij,®Ob\'^)ab- □ 
Lemma C.3. 2. Let \<^)ab = \n)AB- Then, for any unitary U, 

U1®Ub\-^)ab^\'^)ab (C.27) 

if the conjugation is with respect to the basis and Ub has the same matrix elements with re- 

spect to the {Ij)^} basis as Uj^ with respect to the basis, i. e. Uj^ — J^ij Uij\i)AAi.j\ '^"'^ ^B = 

U^J\i)BB{j\■ 



Proof. We obtain 



UX®UBmAB = ^ J2 U*j\i)AA{j\Umn\rh)BB{n\\k)A\k)B 
ijrnnk 

= E ^^3\^)AUrnn\m)BB{f^\j)B 



ijmn 



^ ijm 
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D Schur Transform and Eigenfunction Method 



The Schur transform is a unitary transformation relating the stairdard computational basis of n qudits 
of dimension q to a basis associated with the representation theory of the symmetric and general linear 
groups. This chapter explains how the eigenfunction method CPW02| | can be used to obtain a computer 
program which calculates the Schur transform for given values of n and q. As explained in section fD-li 
the eigenfunction method decomposes a given group representation into its irreducible parts. It is 
shown in section ID. 21 how the Schur transform can be obtained with the help of the eigenfunction 
method applied to the natural representation of the symmetric group S„ . In addition we present some 
examples and discuss how the Schur transform allows for efficient communication in the absence of a 
shared reference frame. 



D.l The Eigenfunction Method 



This section summarizes the eigenfunction method (EFM) of Chen, Ping and Wang |CPW02| | . Let R{G) 
be a d-dimensional representation of a finite group G on an inner product space V over the field C. 
The EFM can be used to decompose V into a direct sum of irreducible subspaces and to construct a 
basis for each of these subspaces which corresponds to a given canonical subgroup chain. To achieve 
this decomposition of V, a complete set of commuting observables (CSCO) £ is constructed, whose 
eigenvectors (eigenfunctions) are the desired basis vectors. T hey can b e identified by their eigenvalue 
list. All the results presented in this section are taken from While we tried to supply the 



proofs for the fundame ntal resu lts, we sometimes give the remark 'it can be shown'. These missing 
proofs can be found in 



We start with a description of the EFM for general finite groups in subsection ID. 1.11 and specialize 
in the symmetric group in subsection ID . 1 . 2] 

D.1.1 General Finite Groups 

We begin with the construction of the CSCO C decomposing the representation space of the regular 
representation of a finite group G. Let V be an inner product space of dimension d = uq over the 
field C, where uq — \G\ denotes the order of the finite group G, and fix an orthonormal basis 
[i — 0, ...,c? — 1). The elements of the regular representation R{G) of G have the property that 
\i) = i?i|0) for all Ri = R{i) with i & G, with Rq denoting the identity. In other words, 

m,\j) ^ D.,ik) ^ \l '^^''^^ = ^\ (D.l) 

[ else 

The state |0) is said to possess no symmetry with respect to G. A state |0)' which remains invariant under 
G is called totally symmetric with respect to G (it would generate a one-dimensional representation). 
States showing an intermediate behavior are said to possess partial symmetry. 

Subsequently, we show how the construction of the CSCO £ has to be adjusted when dealing with 
non-regular representations R{G). In this case the state |0) is invariant under a set of elements Gin 
forming a non-trivial subgroup of G, i.e. Ra\0) = |0) for all a G Gin, and is said to possess at least 
partial symmetry with respect to G. Naturally, the dimension d of a non-regular rep space spanned by 
the linearly independent \i) = Ri\0), Ri G R{G), is smaller than no- 



179 



D Schur Transform and Eigenfunction Aiethod 
Reduction of the Regular Representation 

Let us define a class operator Ci for each of the conjugacy classes of G as the sum over all operators 
in the corresponding class, 

m 

Q = z = l...nc, (D.2) 

where denotes the j-th element of the i-th class and rii denotes the total number of elements in 
the i-th class. The class operators commute with all elements in R{G), [Ci, Ra] — for all a G G, and 
therefore with one another, [Ci, Cj] = for i, j = 1 . . . n^. We assume that the {Ci}"^j^ are self-adjoint 
(they are if the classes are ambivalent), otherwise an equivalent set of self-adjoint operators {Cj'}"^j^ 
can be obtained by taking suitable linear combinations of the non-ambivalent Ci. The class space is 
defined as the n^-dimensional subspace of the regular rep space V spanned by the orthogonal set of 
states 

{|a)=5^i?(af)|0)}"^^ (D.3) 

with {Cj[Ci) — TiiSij. It can be shown that the class space forms a so-called natural representation space 
of the class operators, and that the set of class operators (Ci, . . . , C„^) is a CSCO of the natural 
rep, reducing the natural rep to a sum of one-dimensional irreps via the eigenvector equation 

(Ci, . . . ,C„J|Q('')) = {X[''\. . . , Ai';))|Q('^)) ^ A('^)|qM), (D.4) 

with IQ^''^) = Ij'^^ ^ general (Ci, . . . ,C„^) is over-complete. If a subset 

C = (Cii , . . . , Ci, ) of the class operators (Ci , . . . , C„^ ) is a CSCO of the class space, then C is called 
CSCO of the first kind (CSCO-I) of G (different CSCO's are equivalent in the sense that they lead to 
the same eigenvectors jQ'"-')). It can be shown that in any representation space V the eigenvalues A'-''^ 
of C do not go beyond the values determined in class space, and that in the regular representation 
space there are and only ti^ distinct eigenvalues A^"^. By theorem 11.2.31 the eigenspaces of C in 
a rep space V are representation spaces and the regular rep space V is reduced to a direct sum of 
mutually orthogonal subspaces, 

"c 

V = 0V„ (D.5) 

where CV^ = A^^'V^ (in a non-regular representation space V one or more of the Vi, might be trivial 
subspaces containing only the zero vector). Using the fact that the representative of C on must be 
equal to the identity times the eigenvalue A^''^ it can be seen that representation spaces belonging to 
different eigenvalues are inequivalent. A representation space may still be reducible, 

= V^,i©---®V^,r„, (D.6) 

where irreps V,y.fc with the same label i/ are equivalent. The results presented so far lead to the well 
known result that a finite group with classes has and only inequivalent irreps. The irreps can 
be labeled uniquely by the eigenvalue list A'-'^' of a CSCO-I C (we use the symbol v as label). If a vector 
IV''-''') belongs to the eigenspace Vi, of a CSCO-I C of G, the vector is said to belong to the irrep ly of G. 

Theorem D.1.1. A necessary and sufficient condition for a vector [i/j^'^^) to belong to the irrep v of G 
is that 

C|i^('')) = A('')|i^('')). (D.7) 

Proof. The sufficiency is trivial. We prove that the condition is a necessary one. Suppose [ip^'^^) is a 
vector in an irreducible subspace Vi, of G. It follows that Vi, is an invariant subspace of C and by 
Schur's lemma we obtain that V„ is necessarily an eigenspace of C. □ 
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This theorem is the corner stone of the EFM. It allows the problem of finding the irreps of G to be 
converted into the problem of finding the eigenspaces of a CSCO-I C of G (i. e. we have to diagonahze 
the operator in the reducible basis |0), . . . , |d — 1) spanning V). 

Let us now consider a canonical subgroup chain G D G{si) D G(s2) . . . , or by using the the abbre- 
viation G{s) = G{si) D G(s2) ■ • ■ , G D G(s). Analogous to theorem ID . 1 . 1 1 we obtain the following 
theorem. 



Theorem D.l. 2. A necessary and sufficient condition for a vector \ip 



to belong to the irreps j/, A(si), A(s2) 
following eigenequations, 



A(si),A(s2), 



in a rep space V 



of a subgroup chain G D G(s) is that the vector satisfies the 



/ C \ 

G(si) 



IV' 



A(si),A(s2), 



( " \ 

A(si) 

V ; J 



IV' 



A(si),A(s2), 



(D., 



where C is a CSCO-I of G and C{s,) is a CSCO-I ofG{si). 

Remark. Using the abbreviations G(s) — (G(si), C{s2), ■ • ■ ) and m = (A(si), A(s2), ■ • ■ )i the eigenequa- 
tion of the above theorem becomes 



G 
C{s) 



1^: 



IV'. 



(D.9) 



If the subgroup chain is canonical, the set (G, G(s)) is called CSCO-II of G. 



Suppose the eigenspace is an irreducible rep space of G. Than the degeneracy of the eigenvalue 
A^"-* in (jD.7p is equal to the dimension hi, of the irrep and is totally lifted by the eigenequations of the 
G(s) (i.e. the degeneracy of the eigenvalues {{v,mi)}^^^ is one). If Vy is a reducible rep space of G, 
the degeneracy of A'-''' is given by Ti, x h^, and for each value {v^ mi) there are linearly independent 
eigenvectors |V'm^^), t = 1 . . . t^, e {2, 3, 4, . . . }. 

We now introduce the intrinsic group G of G which is used to complete the set CSCO-II to a complete 
set of commuting observables (CSCO-III) £ on the representation space V. 

Definition D.1.1. For each operator g in G, we define a super-operator g acting on the elements of 
the group algebra A = CG (any element a in ^ can be written as a = X^^gg ^99 ^i^h o,g G by 

ga = ag for all a ^ A. (D.IO) 

The group formed by all g is called the intrinsic group G of G. 

We proceed by proving two important lemmas concerning the intrinsic group. 

Lemma D.l. 3. The operators in G commute with those in G. 

Proof. We have sft ~ str — fst for all t ^ A and therefore [f, s] = for all s G G and f & G. □ 
Lemma D.l. 4. The group G is anti- isomorphic to G. 

Proof. Suppose the multiplication relation in G is rs = u for r, s, u G G. Then sft — str — trs — tu — ut 
for alH € .4 and we have sf ~ u. □ 



*C is a set of commuting operators, but by taking a suitable linear combination of these operators, it suffices to diagonalize 
only one single operator. 
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If we consider the action of the elements of the intrinsic group on the representation space V of a 
representation R{G) with basis — i?,;|0)}, we have to define a state, say |0), as the intrinsic state, 
i. e. the elements of G act on the basis states as 

Rb\a) = RbRa\0) = RaRb\0). (D.ll) 

Note that if the intrinsic state is invariant under a symmetry group Gin C G, we have ^f,|0) = ^f,T|0) = 
ri?f,|0) = T\b) for aU T e Gin and on the other hand ^6|0) = Rb\0) = |6) which is a contradiction. 
Therefore, the following only holds for the regular representation R{G) for which Gin contains only the 
identity. The anti-isomorphism between G and G assures that the conclusions about G apply to G as 
well: 

(i) If G = (G, , . . . , ) is a CSCO-I of G, then G = (G,, , . . . , G,, ) is a CSCO-I of G with 

rii 

C,=Y,R{af). (D.12) 
Note that the CSCO-I of G and G are equal, since 

C^Rk = {Y. - MY. ^i^f)) = RkC^ = G,i?fc, (D.13) 

i=i i=i 

where the last identity holds because [G^, i?] = for all Rk G R{G). 

(ii) If G has a canonical subgroup chain G D G(s), G(s) = G(si) D G(s2) D with CSCO-II 
(G, G(s) — (G(si), G(s2), . . . )), G has a canonical subgroup chain G D G(s), G(s) = G(si) D 
G(s2) 3 . . . , with CSCO-II (G, C{s) = (G(si), G(s2), ..•))■ 

Because of lemma ID. 1.31 [C{s),C{s)\ = 0, which allows the G(s) to be added to a CSCO-II of G and 
the following theorem to be proved. 

Theorem D.1.5. The set €. = {C , C {s) , C {s)) defined on the regular rep space V of a group G with 
canonical subgroup chain G{s) — G(si) D G{s2) D ... is a CSCO on V (called CSCO-III). The 
corresponding eigenequation is given by 




Hi:'"), (D-14) 



with k = (A(si), A(s2), 



Because (G, G(s)) commutes with all the elements in R{G), the eigenspaces V,^m = span{|^/'mi'^)}, 
i — l...hi, of (G, G(s)) are necessarily representation spaces of R{G) and the degeneracy of m,; is 
necessarily independent of i. Since in addition £ = {C , C [s) , C {s)) is a CSCO of V, {C{s),C{s)) is 
necessarily a CSCO in each eigenspace Vi/, v = 1 . . .n^, and the degeneracy of m^, i = 1 . . . ft-i,, in is 
completely lifted by the eigenvalue k of C{s). It can be shown that the representatives of the operators 
G{si) and G(si) in V^, are similar matrices. Therefore, the characteristic equations of G(s) and G(s) 
in Vi, are identical and it follows that the eigenvalue k takes on the values ki — mi for i — 1 . . .hy. 



Equation (jD.6p in the regular rep case becomes 

V. = V,,fc,, (D.15) 



i=l 
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and we have d = no =^ ^i- 

Since the normahzed vectors \ipm^'') are obtained by solving an eigenequation, they are determined 
only up to a phase factor. Let the eigenvectors be expressed as 

nc — l 

IV'm'"') = ^ ■U,ymk,i\i), U^mk,i & C, (D.16) 
1=0 

or, in the basis of the as column vector u^rnk- The standard phase choice is the convention to choose 
the Ml/mm, to be real and positive for all m (in fact it can be shown that in this case u^mm,o = \/ / uq) . 
Starting with the first eigenvalue of k (denoted now simply as fc = 1), the phases of the vectors u^rni 
for m — 2 . . .hi, can be chosen arbitrarily. This choice fixes the representation matrices (we demand 
them to be identical in equivalent representations), which are now given by 

Dl;\a)^{4^^'\R^\4^'), (D.17) 

for all a lE G. When using the standard phase choice, the representation matrices can be shown to be 
directly related with the vectors via 



A7(«) = ^7j;<u,a- (D-18) 

This expression allows the phases of the remaining vectors Uumk with fc > 1 to be fixed by demanding 
that Uvrnk,a IS equal to ^/h^/nc ■ D^mki^)* ™- 

Reduction of Non-Regular Reps 

The construction of the CSCO-II of G is the same for regular and non-regular representations. For 
non-regular reps, only the completion of the CSCO-II to the CSCO-III £ has to be adjusted. As it 
was shown in the paragraph following equation (jD.ll[) . an intrinsic state which is invariant under a 
non-trivial symmetry group Gin C G, leads to a contradiction which makes the definition of intrinsic 
group elements meaningless. The observation which saves the day is the following. 

Lemma D.l. 6. // a class operator Ci{sj) of a subgroup G{sj) of G commutes with the symmetry group 
Gin C G, then the class operator Gi{sj) of the corresponding intrinsic group G{sj) has a well defined 
meaning. 

Proof. We repeat the calculation which led to the contradiction. On the one hand we have Ci{sj)\a) = 
C^{sj)Ra\0) = RaG^{sj)\0), on the other hand we have Ci{sj)\a) = C^{sj)RaT\0) = RaTC.,{sj)\0) . 
But if the class operator and the symmetry group commute, we continue the calculation and obtain 
. . . = RaCi{sj)T\0) = RaCi{sj)\0) for aU T e Gin- The contradiction vanishes. □ 

If we remove all subgroups from the canonical subgroup chain G(s) = G(si) D G(s2) D . . . whose class 
operators do not commute with Gin, we obtain the (non-canonical) subgroup chain G(s') = G(sij) D 
G(si2) D ... (with ii < 22) and the lemma tells us that the CSCO-I's G(s') — ((7(5^ J, (7(5^3), . . . ) of 
G(s') still have a definite meaning. Theorem ID. 1.5 1 is replaced by: 

Theorem D.l. 7. Let V — span{i?a|0) | a G G} be the rep space of a rep R{G) of a group G with 
canonical subgroup chain G(s) and symmetry group Gin. Then the set £ = {C,C{s),C{s')) (with G(s') 
as defined above) is a CSCO on V (called CSCO-III). The corresponding eigenequation is given by 

\C{s')J 

with K = (A(siJ, A(siJ, . . . ). 
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To set the phases of the vectors |V'm ) in such a way that the representation matrices 

= (V'l'^^li^alV'f (D.20) 

do not depend on k and agree with those of the regular rep, we choose the phases of IV'i'^^'*) arbitrarily 
for all K and use the known matrix elements of the regular rep matrices to determine the phases of the 
IV'm^'*) with m > 1. 



D.1.2 Symmetric Groups 

The results of the preceding subsection are now specialized for the case that the group G under con- 
sideration is the symmetric group S„. Using standard results of the representation theory of S„, the 
construction of the CSCO £ can be simplified. 



Representation Spaces 

The elements of S„ are permutations which are denoted as 



^=1,(1) .(2) ::: .w'^ <°-^^' 



The inverse of p G S„ is given by 



where the right-hand side is obtained by permuting the columns of the matrix of the left-hand side. Let 
Tiq be the Hilbert space of a qudit of dimension q and let an orthonormal basis {|0), |1), . . . , — 1)} be 
fixed. In this section we will usually label these basis states using the Greek alphabet, i.e. |0) = |a), 
|1) = I/?), |2) = I7), and so on. A representation -D(S„) of S„ on the (/"-dimensional linear vector space 
W®" is given by defining the action of a permutation p G S„ on a n-fold tensor-product of one qudit 
basis states by 

D{p)\i\ ,i2,---,in) = Kp-i(i) ' *p-H2) ' • • • ' VM"))- (D.23) 

We define the configuration of a standard basis vector in 7^®" as a string of integers of length q counting 
the number of times a certain one-qudit basis state appears in the vector, e. g. for n = 5 and g = 4 we 
have 

conf\g{\aaSal3)) = (3, 1,0, 1). (D.24) 

Since the configuration of basis vectors in Hf"' remains invariant under S„, the representation space Hf^ 
of S„ decomposes into a direct sum of representation spaces each of which is characterized by a certain 
configuration string. The dimension of a rep space V with configuration config = (no, ni, . . . , n^-i), 
^■TT-i = n, is given by the multinomial coefficient n^- / {Yli ni\) . Altogether there are ("^^7^) different 
configurations. 

The regular representation space V occurs only if q = n and coincides with the rep space with 
configuration (1, 1, . . . , 1). Its basis vectors {\p)} are obtained by applying the g = n\ elements of S„ to 
the generating state |0) := |0, 1, . . . , g — 1), i. c. \p) = D(p)\0) with p E S„. 

For a non-regular representation space V with configuration (no, ni, . . . , ng_i) ^ (1,1,..., 1), we 
define the generating state |0) by 

|0) := |0,...,0 , , ... , q-l,...,q-l). (D.25) 
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The generating state |0) is obviously invariant under a non-trivial symmetry group Gin C S„ and the 
dimension d = "i/dli"*') the non-regular rep space V — span{I?(p)|0) | p £ S„} is smaller than 
no = n\. 

In the remaining part of this subsection we explain how the EFM described in the last subsection is 
applied to a rep space V C Hf" of S„ characterized by a certain configuration string. 

Young Diagrams & CSCO-I 

Each permutation can be decomposed into a product of disjoint cycles, for example p = (siitle) 
can be written as the product p = (If) x (524) x (e) = (13)(254)(6). The conjugacy classes of the 
symmetric group S„ are characterized by a certain cycle structure: Each class contains only elements 
of one particular cycle structure. A cycle structure corresponds to a partition of n. A partition v of n 
is given by a set of positive integers v = [vi,i>2, ■ ■ ■ , Vv] such that Vi = n and Vi > Vi+i. It can be 
depicted as a Young diagram in which the i-th row contains Vi boxes. For instance, for n — A there are 
the partitions [4], [3, 1], [2, 2], [2, 1, 1] and [1, 1, 1, 1] which correspond to the Young diagrams 



and 



Since the number of inequivalent representations of a group G is equal to the number of its conjugacy 
classes, the inequivalent reps of S„ may be labeled by Young diagrams corresponding to the partitions 
of n. This means that there is a one-to-one correspondence between the eigenvalues of the CSCO-I C 
of S„ and the Young diagrams corresponding to the partitions of n. 

If a state IV'^''^) is in a rep space C V labeled by the Young diagram 1/ = [i^i, 1^2, ■ • . , t't;], it is 
necessarily an eigenstate of the class operators of S„. It can be shown that the eigenvalues A2 and A3 
of the 2- and 3-cycle class operators and C3 can be expressed as functions of the Young diagram 
as follows. 



'^2 



A? = -n - -n^ + 



1 " 

1 " 

- K - (3i - 3/2)z., + - 1)] . 



(D.26a) 
(D.26b) 



For n < 6 the 2-cycle class operator alone forms a CSCO-I, but for n = 6 degeneracy occurs which has 
to be lifted by adding for example the 3-cycle class operator. For n < 15 a CSCO-I C of S„ is given by 
the 2- and 3-cycle class operators, C = (C2 , C3 ). The eigenvalues Aj and A3 of and C3 are listed 
in the form 



for n = 1 ... 7 in figure ID. II 



Young Tableaux & CSCO-II 

A canonical subgroup chain S„ D G(s) of S„ is given by G(s) = S„_i D • • • D S3 D 82. According 
to theorem [DT2I the CSCO-II of S„ is given by (G(S„),G(s) = (G(S„_i), . . . , G(S2))) , where the 
operator G(Si) denotes the CSCO-I of S^. It can be shown that this set of commuting observables 
is over-complete and that a simpler set is given by (G2 , Gj . . . , G|) which contains only 2-cycle 
class operators. While the 2-cycle eigenvalue of, say, G| alone is not necessarily enough to deduce the 
eigenvalue X{Si) of G(Si), the whole set of 2-cycle eigenvalues allows us to deduce the eigenvalues v and 
m = (A(S„_i), . . . , A(S2)) of G(S„) and G(s). The reason behind this fact is the branching law, which 
states that a subduced rep D'-'^'>{Sj) | Sj_i of an irrep of Sj decomposes into 



Z?M(S,)iS,_i=0i?(''')(S,_i), 



(D.27) 
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where the v' are obtained from the Young diagram v by removing a single box in aU possible ways, e. g. 



(D.28) 



In figure [DTT] the Young diagrams of S„ are shown in rows from n = 1 {top row) to n — 7 (bottom row). 
The branching law is indicated in the figure by gray arrows. Under each Young diagram the eigenvalues 

are shown in the form '^l . As an example of how the eigenvalue list of 



of and of and 



, C|) determines all Young diagrams (i. e. all eigenvalues and m of C and C(s)), let us 



consider the case n — 7 with 



{Cl Cl, Cl,Cl Cl Cl,G\) |^(;:)) = (3, 3, 0, 2, 0, 1, 0)|^(„^)) 



(D.29) 



(we added C\ whose only eigenvalue is zero) which is shown in figure [Dj] in red. Starting at the top of 
the tree diagram with the eigenvalue of Cj, we follow the gray arrow (in the opposite direction from 
top to bottom) which leads to the next eigenvalue 1 of C| (the resulting path is shown in red), and so on. 
By following a path provided by the branching law, any possible degeneracy of the 2-cycle eigenvalues 
(in our case the degeneracy of the eigenvalue 3 of Cf) is artificially lifted since it can be shown that 
only one of them will be accessible by the preceding path. Therefore, the eigenvalue list of the CSCO-II 



(6*2 , ^, . • ■ , Cf) describes a unique path connecting Young diagrams of S„, S„_i, . . . S2, Si which 
correspond to the eigenvalues {v,m) of the original CSCO-II (C(S„),C(s) = (C(S„_i), . . . , C(S2))) . 
Instead of writing down all n Young diagrams, they are summarized in a Young tableau Ym'' which is 
obtained from the Young diagram v corresponding to the eigenvalue of C(S„) by filling its boxes with 
the numbers 1, 2, ... n in such a way that if the box with number n is removed, we obtain a Young 
tableau which is shaped like the Young diagram corresponding to the eigenvalue A(S„_i) of C(S„_i), 
and so on. For our example we obtain 



(3,3,o,2,o,i,o)^yir^ 



1 


2 


4|6| 


3 


7 




5 







,□ . (D.30) 



As a consequence, a Young tableaux is always filled in such a way that the successive removal of boxes 
corresponding to the numbers n, n — 1, etc., results in valid Young diagrams: In a Young tableau, the 
numbers always increase to the right and downwards. 



Weyl Tableaux & CSCO-II I 

Let us consider the representation space V C Hf" with configuration config — (no, ni, . . . , n^-i), 
rii — n. The generating state |0) defined in equation (|D.25p . 

|0) |p,-..,q , , ■■■ , (D.31) 

no ni "g-i 

is invariant under the action of the subgroup Gin C S„ containing |Gin| = rii"-*' elements. The group 
Gin decomposes S„ into a disjoint set of left cosets, S„ = Gin U a'Gin U b'Gin U . . . , where each coset 
contains |Gin| elements and {a', b' , . . .} denotes a set of coset representatives. An orthonormal basis 
{\i)}i=o...d-i of V is obtained by applying the d = |S„|/|Gin| = nl/J^-nJ coset representatives to the 
generating state |0), i. e. \i) = D{pi)\0), with pi £ {a' , b' , . . . }. The basis {\i)}i=o...d-i forms a subset 
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Figure D.l: Tree diagram sliowing tlie Young-diagrams corresponding to tiie partitions of n = 1 (top row) up to n = 7 {bottom row). The gray arrows indicate 

the branching law. Under each Young-diagram the corresponding eigenvalues of the 2-cycle class operator and A3 of the 3-cycle class operator CJ axe 

shown in the form ^l, . 
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of the computational basis of 7i^". We define the string of integers config' = {ni^.rii^, . . . ,nij) by 
removing aU zeros from config. Then the structm'c of the symmetry group Gin C S„ is given by 

Gin = S„^^ ® S„,^ S„,^ . (D.32) 

It is easy to see that the class operators G,"''"'' of the subgroups {Sn(j)}j=i...i with n{j) — J2i=i''^ia 
commute with all the elements in Gin- Therefore, according to lemma ID.1.6[ the corresponding 
class operators G"^"'"' of the intrinsic group are well defined and according to theorem ID.1.7[ the 
CSCO-II of V can be extended to a CSCO £ on V (called CSCO-III) by adding the set G(s') = 
(G(S„(,.i)), . . . , G(S„(2)), G(S„(i))) of CSCO-Fs of G(s') = S„(,.i) D • • • D S„(2) D S„(i). Since G(s') 
is not a canonical subgroup chain of S„ anymore, the set (G(S„), G(s')) cannot be replaced by a set of 
2-cycle operators as it was done for the set (G(S„), G(s)). 

To give an example, let n = 7, q = 6, and let us decompose the rep space V C Hf" with config = 
(OxQ, 2x/3, 2x7, 0x5, Ixe, 2xf ). For this configuration we have G(s') = S5 D S4 D S2 and we consider an 
eigenvector j-f/j^'^)'') with eigenequation 

(G(S„),G(s'))l^^''''') ^{Zl,m,zl J,")IV'^^^"> ^ (D.33) 

(We expanded the eigenvalue list to the length n by inserting black squares in the places where subgroups 
have been removed from G(s) to obtain G(s').) Since n < 15, G(S„(j)) — ( Gj' Gg '•"''') and we wrote 
the corresponding eigenvalues on top of each other. Our eigenvalue list (i', k) corresponds to a set of 
Young diagrams (indicated in blue in figure [DT|) . 



f-s ■ -2 ■ 1 ^ wl") — 



which can be summarized in a so-called Weyl tableau W^'^' as follows: The Weyl tableau Wii^' is 
the Young diagram of S„ = Sn(i) corresponding to the eigenvalue of G(S„) — G(S„) (compare with 
equation (|D.13p ) in which rii boxes are filled with the i-th letter (basis state) of the Greek alphabet, and 
where the filling is done in such a way, that removing the boxes filled with the ii-th letter results in 
a Weyl tableau which is shaped like the Young diagram corresponding to the eigenvalue of G(S„(i_i)), 
and so on. It follows that a Weyl tableaux is always filled in such a way that the successive removal of 
boxes corresponding to the ii-th, ii_i-th, etc., letter results in valid Young diagrams: In a Weyl tableau, 
letters have to increase downwards and never decrease to the right. Because of the former restriction, 
the maximum number of rows of a Young diagram is given by the number of letters (basis states) q. 







cl 
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7 




e 






c 







(D.34) 



Final Remarks 

As a summary, the complete CSCO £ of S„ on a rep space V C 7i®" characterized by a configuration 
config = (no, jt-i, . . . , Uq-i) is given by the set of operators 

e:=(G^\ c'r\---,cl G(s„(i_i)),...,G(s„(3)),G(s„(2)))[!|. (D.35) 

(Note that G(S„(;)) and G(S„(i)) are obsolete since G(S„(;)) — G(S„) — G(S„) and G(S„(i)) always 
corresponds to the Young diagram of the form v = [n(l)]). The eigenvectors iV'm'''^) of the corresponding 
eigenequation 

e:|V'L^)«) = (z.,.j,m)|^(„-)«) 



^Instead of constructing the operators C(S„(j)), in practice it is of advantage to construct the operators C(<S„(j)) which 
correspond to the so-called state permutation group iS^jj) and which are identical to the (^(Snfj)). 
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are labeled by (i) a Young diagram v labeling inequivalent rep spaces V^, (ii) a Weyl tableau wi'^'' 
labeling equivalent irreducible rep spaces Vi/,k C V^, (iii) a Young tableau Ym'' labeling the basis states 
of an irreducible rep space. 

The orthonormal l^m^"^) obtained from equation (|D.36p are determined only up to a phase. The 
Yamanouchi phase convention demands off-diagonal matrix elements of adjacent transpositions to be 
positive. It can be shown that as a result of this convention, the following rule determines the phase of 
a vector 

pe{a',b',... } 

Lemma D.l. 8. To satisfy the Yamanouchi phase convention, the phase of a vector jV'm^'^) has to be 
chosen in such a way that UumK,,f > 0, where p is called the principal term. The corresponding principal 
state \p) = |pi,p2, ■ • • ,pn) is constructed by setting pi equal to the Greek letter in the box of the Weyl 



tableau Wk'^^ , which is in the same position as the box in the Young tableau Ym' containing the number 
i. For example, 



a 


a 


a\P\ 


1 


2 


4|5| 




S 




3 


7 










6 







|p) = \aa/3a/3jS). 



(D.38) 



The basis {\ipm^'^)} of V obeying the Yamanouchi phase convention is called quasi-standard basis (it is 
called standard basis or Young- Yamanouchi basis for the special case of V being the regular rep space). 

We close this subsection by defining an order of the Young tableaux Ym'' and Weyl tableaux Wk'^'' 
corresponding to a certain Young diagram v = [vi, . . . ,Vy], Vi = n. Before we start, note that the 
Young diagrams {u} corresponding to partitions of n are ordered by sorting the g-digit strings given by 
a partition and supplemented with zeros if v < q (note that v < q), 



(D.39) 



in descending order. The Young tableaux {Ym}}i=i...h,, are enumerated by their eigenvalue list of 
{C2 , ■■ .02,02) and are sorted in descending order. The total number of Young tableaux (for a given 
Young diagram :/) is equal to the dimension h^ of the irrep labeled by v and is given by the hook length 
formula CPW02L page 120]. To define an order of the Weyl tableaux {Vl^ij^''}i=i...Tj!l, we enumerate 
them by their corresponding Gel'fand symbols which are then sorted in descending order. The Gel'fand 
symbol corresponding to a Weyl tableau W^i"-* is defined as the list of non-negative integers 



(1) ^(1) 
'^2 I 



1/(1) • 1/(2) 1/(2) 



(2) 



,(-3-1) 



where v^^^ denotes the Young diagram u (supplemented with zeros as in equation (jD.39p ) and 



(D.40) 

M) = 



,U) 



letters q — 1, . 



J for j ~ 2 . . .q denotes the Young diagram which results after removing the boxes with 
. ,q — j + 1 from Wk'^K For instance. 



p 


P 


tItI 
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s 




S_ 







/4 2 1 0\ 
4 1 
2 
V / 



(D.41) 



Example 

To give an example, we apply the EFM to the 12-dimensional rep space V C Tif^ with configuration 
config = (1,0,1,2). The computational basis of V is given by {|i)}i=o.. .11 — {\a-fdd) , . . . ,\66aj) ,\SSja)}. 

■tNote that Ti^ depends on the configuration of V. 
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u 


•''re m 


|a7(5(5) 


|a(57(5) 


|a557) 


|7a(5(5) 


\j6a5) 


\j66a) 


|(5a7(5) 


\6a5j) 


\6'ya6) 


|57(5a) 


\66aj) 


1557a) 




1/6 V3 


1/6 \/3 


1/6 n/3 


1/6 


1/6 \/3 


1/6 Vs 


1/6 Vs 


1/6 \/3 


1/6 -v/3 


1/6 Vs 


1/6 -^3 


1/6 V3 


c\M5\5l |1|2|3|4| 






























[ 






J2l3l 


1/6 -ya 


1/6 %/3 


-1/6 -^3 


1/6 V3 


1/6 %/3 


-1/6 \/3 


1/6 %/3 


-1/6 V3 


1/6 V3 


-1/6 


-1/6 %/3 


-1/6 V3 














] 


1/6 n/6 


-1/12 -/e 


1/12 


1/6 n/6 


-1/12 Ve 


1/12 


-1/12 \/6 


1/12 vs 


-1/12 x/6 


1/12 -/e 


-1/6 VS 


-1/6 -/e 














J3l4l 





1/4 


1/4 %/2 





1/4 %/2 


1/4 %/2 


-1/4 V2 


-1/4 V2 


-1/4 


-1/4 V2 














[ 






J2l3l 








1/6 








-1/6 %/6 





1/6 





-1/6 \/6 


1/6^/6 


-1/6 














J2I4] 





1/4 V3 


1/12 





-1/4 V3 


-1/12 V3 


1/4 V3 


1/12 V3 


-1/4 


-1/12 


-1/6 V3 


1/6 V3 














J3l4l 


1/2 


1/4 


1/4 


-1/2 


-1/4 


-1/4 


-1/4 


-1/4 


1/4 


1/4 








ffl 




I] 


Ml 


1121 
3741 


1/6 


-1/12 


-1/12 -/Q 


1/6 V6 


-1/12 Ve 


-1/12 -/e 


-1/12 -/e 


-1/12 V6 


-1/12 -/e 


-1/12 -/e 


1/6^/6 


1/6 %/6 














TTa] 
2I4I 





1/4 


-1/4 





1/4, V2 


-1/4 


-1/4 


1/4 V2 


-1/4 V2 


1/4 %/2 












J 




: 




ilJ 

3 
4] 





1/4 


-1/4 





-1/4 


1/4 


1/4 


-1/4 


-1/4 


1/4 


1/2 


-1/2 














ip 

2 
4] 


1/6 V3 


1/12 


-1/4 V3 


-1/6 V3 


-1/12 V3 


1/4 V3 


-1/12 v/S 


1/4 


1/12 V3 


-1/4 n/3 




















ip 

2 

I] 


1/6 


-1/6 





-1/6 V6 


1/6 VS 





1/6 V6 





-1/6 












Table D.l: The quasi-standard basis {jWr^i'mO} of V C HT with config = (1, 0, 1, 2). 
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D.2 Schur Transform 

The sorted basis vectors = \wlf ^Yi^^) of the quasi-standard basis of V obtained via the EFM 

are shown in table ID. ll As it can be seen from the table, V decomposes into 4 irreducible subspaces, 

V = V[4] © V[34]4 ® V[34]^2 ® V[2,2] ® V[2,l,l], (D.42) 

where the irrep [3,1] is two-fold degenerated. The dimensions of the irreps are given by h^^ = 1, 
^[3,1] — 3, ^[2.2] ~ 2 and ^[2.1,1] = 3. Since T[3 1] = 2 and = 1 for the remaining v, we can easily check 
that X — dim(V). Below the table, the representation matrices of adjacent transpositions are 

shown for the two 3-dimensional irreps [3, 1] and [2, 1, 1]. 

D.2 Schur Transform 

The Schur transform is a unitary transformation relating the standard computational basis of n qudits 
of dimension q to the Schur basis, a basis associated with the representation theory of the symmetric 
and general linear groups. In the preceding subsection it was shown that the vector space of n qudits 
decomposes into a direct sum of representation spaces V of the symmetric group, each of which is 
characterized by the frequency distribution of the one-qudit basis states. In this section we show that 
the Schur basis is given by the collection of the quasi-standard bases of the symmetric group of all the 
rep spaces V. 

D.2.1 The Schur Basis 

Let Hq denote the Hilbert space of a qudit of dimension q and let an orthonormal basis {|0), |1), . . . , jq — 
1)} be fixed. Occasionally we label these q basis states using letters from the Greek alphabet, i.e. 
|0) = \a), |1) = 1/3), |2) = I7), and so on. The set of invertible linear transformations on Hq is called 
the general linear group GL{q,C) = GLq. An element p e GL^ is defined hy q x q complex numbers pij 
and transforms the basis states according to 

q-l 

i=0 

The computational basis of the Hilbert space Hf"' of n qudits of dimension q is given by the set of 
n-fold product states of the one-qudit basis states, 

Hf" = span{|ii,Z2,...,z„)}, (D.44) 

with < ij < q for j G {1, 2, . . . , n}. A representation D{GLq) of GL^ on Hf"" is defined by 

D(p)|ii,Z2, . . . =p(g)p---(g)p|ii,i2,...,in) (D.45) 

for any p G GL^. For the symmetric group S„ a representation D(Sn) on H®"' was defined by equation 
(|D.23|) . where the action of D{p) on a computational basis state was defined as 

D{p)\ii,i2, ■■■,in) ^ lv-i(i),V-i(2), ■ • ■ (D.46) 

for any p E S„. Hence, the ^"-dimensional vector space Hf" forms a representation space for both 
the symmetric group S„ and the general linear group GL^. An important observation is the following 
lemma. 

Lemma D.2.1. Elements o/D(S„) and D (GLq) commute, i.e. 

[D{p),D{p)]=Q, (D.47) 

for all p £ Sn and all p £ GLq . 
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As it was discussed in subsection ID.1.21 Hf" is a direct sum of rep spaces V of S„, each of which 
is spanned by a subset of the computational basis which is characterized by a configuration string 
config = (no, ni, . . . , Uq-i) of length q (with J2i '^i = specifying the number of one-qudit basis states 
(see eq. (|D.24p '). Let us now calculate the quasi-standard basis of S„ for each of the ("^^Y^) different 
representation spaces V C TL®^ by solving the eigenvalue equation (|D.36p and applying the Yamanouchi 
phase conventiord. The collection of all basis states obtained this way, 

{Wi'^Y^})], withj.-{[n],[n-l,l],...}, j = {l,...,/i,(GL,)}, i - {1, . . . , /i,(S„)}, (D.48) 

forms the Schur basis which has the following properties: 

Lemma D.2.2 (Properties of the Schur basis). 

(i) The subspaces V^^k. which are spanned by the {{Wn'^'^Ym^)^ ^ ^ are irreducible rep spaces 
of Sn ■ For p G Sn we have 

D{p)\Wi^'^Y!;:}) = Df;>{p)\Wi^'^Y,\:j). (D.49) 

The dimension h^{Sn) of these irreps is given by the hook length formula (see e.g. \CPWOi . page 
120]) and depends only on v. 

(ii) The subspaces V™ which are spanned by the {^W^'^^Ym^)^ h (GL ) '^^^ irreducible rep spaces 

of GLq . For p G GLq we have 

DifiWl^^^Yi^^) = D',:\p)\W^';^Yi^^). (D.50) 

The dimension h^{GLq) of these irreps is given by the Robinson formula (see e.g. \CPWOi . page 
319]) and depends on v and q. 

Proof. Part (i) was shown in detail in subsection ID. 1.2 1 To give a (partial) prove of part (ii), we recall 
that an over-complete CSCO-III of S„ on a subspace V C 7i®" characterized by a certain configuration 
config is given by the union of (C(S„), C(s)) and {C{Sn),C{s' j) (see subsection ID.1.2p . and that the 
{Wn'^^Ym^) are the eigenstatcs of the CSCO-III with eigenvalues Ym"* and w!f\ 

(C(S„),C(.))|W^MyM) = Yi^^iwi'^^Yi^^) 
(c(s„),c(,s'))|w^i^)rir^) = w^i-^^iw^i^^rir^). 

Let us now assume that the operators (C(S„),C(s)) are extended to the corresponding operators on 
Hf". By lemmaEXH any D{p) with p £ GL, commutes with (C(S„), C(s)), 

(c(s„),c(s))7^(p)|w^MyM) = Yi^^DipWl.'^^Y^;:^), 

and we conclude that 

i=i 

Eventually, it can be shown that the representations D^'^^"'^{p) do not depend on m and that they are 
irreducible. □ 



^Actually we do not have to perform this calculation for all the spaces V C H^" . If the non-zero elements config' and 

config of the configurations config and config of rop spaces V and V are the same, the CSCO-III of V and V is identical 
and we can adopt solutions already known by relabeling the basis states and Weyl tableaux. 
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It follows from lemma ID. 2. 21 that the common representation space TCf"" decomposes into a direct sum 
of tensor spaces, 

where the sum over the Young diagrams v runs over all diagrams with at most q rows. Any product of 
operators D{p) and D{p) becomes block-diagonal, 



(D.52) 



for any p e S„ and any p € GLg. 
The Special Case of Qubits 

For q = 2 things are simpler, as Young diagrams {v — [i/i,z/2]}, with vi > 1^2 ^ and vi + 1/2 — n, 
consist of at most two rows and can be labeled by an index j, where 2j is the number of columns 
consisting of one row only (j = . . . ^ if 71 is even, j = ^ . . . ^ if n is odd) . 



2j 



The dimension of the irrep j of S„ is given by the hook length formula, which in this case yields 

2.7 + 1 



hj{Sn) 



n/2-]J n/2 + ] + l- 



(D.53a) 



The Weyl tableaux W^^ are now labeled hy k — —j, . . . , j, where j + k denotes the number of /3's 
(ones) in the first row of the Weyl tableaux: 



2i 



a 


a 







a 


a 


a 1 a 




(3 







j -k j + k 



The total number of Weyl tableaux for a given j is 

/ij(GL2) = 2j + l. 

Equation (jP.Sip becomes 

n/2 

span! I W,^^') I 

' k=-j---+j 



spanjlW^i^')} ^spanllyW)} 



J=0,l/2 



(S„) 



(D.53b) 



{D.54) 



D.2. 2 Examples 

Within the framework of this theses, a matlab program has been developed which obtains the Schur 
basis for given values of n and q by implementing the ideas presented in subsections ID. 1.21 and ID. 2. II 
To give some examples, we present some of the Schur bases obtained by the program. 
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The first example is tlie Scliur basis for q ~ 3 and n = 3. Tlie Hilbert space of tlie three qudits 
deconiposes as 



nf^ ^ span 



j = 1...10 



span{|M/(f.il))} «span{|yaf-il))} |M/([i-M])) ^ |y^[i,M])), (D.55) 

^ J J — 1...S ^ J 2—1. ..2 

and the Schur-basis- vectors are listed in table ID. 21 

As a second example, we consider q = 2 and n — 1,2,3,4,5. The resulting Schur-basis vectors are 
listed in table ID. 3] for n = 2, 3, 4 and in table ID. 4l for n = 5. The Schur basis of Tif^ coincides with the 
computational basis, i.e. we have |[a][T]) — \a) and |[^[T]) — |/3). The Schur basis of Tif^ is given 

by 



\a\Q 


1 


2 




\a\l3 


1 


2 




/? /? 1 


|2 




a 
Jl 


T 
_2_ 



\aa), 

{\al3) + \f3a))/V2, 
1/3/3), and 

^2. 



(D.56) 



The Hilbert space of the n = 5 qubits decomposes as in equation (jD.54p with /ii/2(S5) = 5, /i3/2(S5) = 4 
and /i5/2(S5) = 1. 



D.2.3 Application: Communication without a Shared Reference Frame 

An important application for the Schur transform in the context of quantum inform ation theory is 
classical and quantum communication without a shared reference frame BRS03 : Let us restrict 

ourselves to the case where two parties, say Alice and Bob, are connected via an ideal quantum channel 
transmitting qubits. If they don't share a common reference frame, the action of the quantum channel 
is to apply a random change of the computational basis spanning the Hilbert space Ti.2 of the qubits. 
When Alice sends n qubits in the state p £ S{Tif"'), Bob receives the state 



(D.57) 



Using the Schur basis, the Hilbert space of n qubits decomposes as in equation (ID.54P and Schur's 
lemma assures that the action of M.n can be written as 



Tl/2 



H„ 



(D.5g 



where Hj denotes the projection on the Young diagram j and T^2j+i denotes the complete depolarizing 
channel on the 2j + 1 dimensional tensor space of the irreps of SU2- 

To transmit classical information to Bob, Alice chooses a normalized state 



0) 



(D.59) 



for each Young diagram j = 0, 1/2 . . . n and Young tableau Im^ , i = 1. . . /ij(S„) (for example au 
5k,+j)- Altogether there are 



ri/2 
J=0,l/2 



(n/2) 



. (n/2+1/2) 



if n is even 
if n is odd 



(D.60) 
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V 




m 




1 1 1 1 
1 1 1 1 


lalalal 




\a(xa) 
1 




\a\a\l3\ 


|l|2|3| 


|aa/3) 

1/3 \/3 


\al3a) 

1/3 \/3 


\l3aa) 

1/3 V3 










\a\0\g\ 


|l|2|3| 


|a/3/3> 

1/3 


|/3a/3> 

1/3 V3 


l/3/3a> 

1/3 V3 










\8\0\d\ 


|l|2|3| 


1/3/3/3) 

1 




|,,|„|-| 


1 1|2|:}| 


1 rtrv") ) 


1 a'7 rt) 












lalgKI 


|l|2|3| 


1/6 V6 


l"7/3> 

1/6 V6 


|/3a7) 
1/6 


1/370) 
1/6 \/6 


I7Q/3) 
1/6 


|7/3a) 

1/6 \/6 






rTT2T3l 


1/3/37) 

1/3 


1/37/3) 

1/3 v/3 


17/3/3) 

1/3 n/3 












rTT2T3l 


\oill) 

1/3 %/3 


1707) 
1/3 %/3 


177") 

1/3 \/3 












rTT2T3l 


1/377) 

1/3 


I7/37) 
1/3 


177/3) 

1/3 v/3 










I'vln'I'vl 


rTT2T3l 


I777) 

1 




w 


jT|2] 
jT|3l 


|aa/3) 

1/3 




|a/3a) 
-1/6 v'e 

1/2 v/2 


|/3aa) 
-1/6 Ve, 

-1/2 \/2 










w 


13J 


1 a/3/3) 

1/6 \/6 


l/3a/3) 
1/6 -/e 


l/3/3a) 

-1/3 \/6 














1/2 V2 


—1/2 -^2 

















|aa7) 
1/3 V6 


|a7a) 
-1/6 


|7aa) 
-1/6 

















1/2 V2 


-1/2 \/2 












13J 


\a0-y) 

1/3 v/3 


1 0:7/3) 

-1/6 \/3 


l/3a7) 

1/3 %/3 


1/370) 

-1/6 v/3 


l7a/3) 

-1/6 \/3 


l7/3a) 

-1/6 \/3 






w 





1/2 





1/2 


-1/2 


-1/2 






13J 


I/3/37) 
1/3 \/6 


1/37/3) 
-1/6 Ve 


17/3/3) 

-1/6 \/6 












w 





1/2 V2 


-1/2 \/2 










\m 




k/37) 



|a7/3) 
1/2 


l/3a7) 



1/37") 
-1/2 


\locl3) 

1/2 


|7/3a) 
-1/2 






^31 


1/3 n/3 


1/6 \/3 


-1/3 


-1/6 \/3 


-1/e V3 


1/6 VS 




EH 


^21 


|a77) 
1/6 V6 


1707) 
1/6 V6 


177a) 
-1/3 Ve, 












^31 


1/2 ^/2 


-1/2 













El 


w 


I/377) 
1/6 ^ 


I7/37) 
1/6 \/6 


177/3) 
-1/3 












w 


1/2 \/2 


-1/2 y/2 











1 i 1 


|a/37) 

1/6 %/6 


l«7/3) 
-1/6 v'e 


l/3c«7) 

-1/6 \/6 


1/37") 
1/6 v'e 


|7a/3) 
i/e Ve 


l7/3a) 
-i/e Vs 



Table D.2: Schur basis {\Wk"^Y^^)} of Wf^ 
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^ m 




1 

m 


1 

\^ 


[m 


laa) 
1 






SI 


Em 


|a/3) |/3a) 

1/2 1/2 \/2 




-1 
EE) 


Em 


1/3/3) 

1 




B 




1 


ffl 


la/3) l/3a) 

1/2 -^2-1/2 1/2 





ffl 







1 

m 




3/2 

□ZD 


3/2 




|aaa) 
1 




1/2 
mg) 


ni2T3i 


|aa/3) |a/3cK) 
1/3 v/3 1/3 \/3 


|/3aa) 
1/3 




-1/2 
wm\ 


rTT2i3i 


|a/3/3) |/3a/3) 

1/3 %/3 1/3 \/3 


l/3/3a) 

1/3 %/3 




-3/2 


fTT2T3l 


1/3/3/3) 

1 


1/2 

F 




w 


|aa/3) |a/3a) 
1/3 -/6-1/6 


|/3aa) 

-1/6 V6 






w 


1/2 \/2 


-1/2 




~w 


w 


|a/3/3) |/3a/3> 

1/6 \/6 1/6 \/6 


|/3/3a> 
-1/3 Ve 






w 


1/2 V2-I/2 






2 2 
rrm rm^ rrT2T3T4] 



™^ m2T3T4l 







jT|2T3l 
jl|2T4] 
jl|3l4l 



jT|2T3l 
jlj2l4l 
jlj3l4l 



jT|2T3] 
jl|2T4l 
jlj3l4l 



\aaaa) 



|aaa/3)|aa/3a)|a/3aa)|/3aaa) 

1/2 1/2 1/2 1/2 



|aa/3/3) |a/3a/3) |a/3/3a) |/3aa/3) |/3a/3a) |/3/3aa) 

I/6V6 l/6\/6 l/eVe 1/6 \/6 l/6V^ l/6\/6 



|a/3/3/3)|/3a/3/3>|/3/3a/3>|/3/3/3a> 

1/2 1/2 1/2 1/2 



1/3/3/3/3) 



\aaaj3)\aaf3a)\aPaa)\0aaa) 
1/2V3 -1/6 V3-1/6 %/3-l/6 

1/3 %/6 -1/6 \/6-l/6 v/6 

1/2 a/2 -1/2 \/2 



|aa/3/3) |a/3a/3) |a/3/3a) |/3aa/3) |/3a/3a) |/3/3aa) 

l/6\/6 1/6 \/6 -1/6 \/6 1/6 \/6 -1/6 Ve-l/e \/6 
1/3 \/3 -1/6V3 1/6V3 -l/6v^ l/eVS -1/3 -/S 
1/2 1/2 -1/2 -1/2 











|«/3/3/3)|/3a/3/3)|/3/3a/3>|/3/3/3a> 

l/6\/3 1/6V3 1/6 a/3 -1/2 a/3 
1/6a/6 1/6\/6 -1/3^6 
1/2 \/2 -1/2 



I aa/3/3) | a/3a/3) | a/3/3a) | /3aa/3) |/3a/3a) | /3/3Qa) 

1/3 \/3 -1/6 ^3-1/6 V3-1/6 V3-1/6 Vs 1/3 Vs 



1/2 



-1/2 



-1/2 



1/2 



Table D.3: Schur bases {IWi'ViT')} ofHf^ {upper left comer), Tl2^ {upper right comer), and Tif {bottom). 
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5/2 




-5/2 



\aaaaa) 



AMcM |l|2|3|4|5l 



-3/2 



Il|2l3l4|5l 



\aaaaf3)\aaaf3a) \cKaf3aa) \af3aaa) \l3aa.a.cx) 

1/5 VS 1/5V5 l/5\/5 1/5 V5 1/5 Vb 



-1/2 



'MMM ll|2|3|4|5l 



|aaa/3/3) |aa/3a/3) |aa/3/3a) |a/3aa/3) |a/3a/3a) \aj3^aa) \0aaal3) |/3aa/3a) |/3a/3aa) |/3/3Q:aa) 

1/10 v/To i/invTn i/iovTo i/io^/To i/iO\/To i/iovTc7 i/iovTo i/io vTo i/iO\/To i/iO\/ro 



1/2 



'Icl/3l3l/3l |l|2|3|4|5l 



|aa/3/3/3) |a/3a/3/3) |a/3/3a/3) |a/3/3/3a) |/3aa/3/3) |/3a/3a/3) |/3a/3/3a) |/3/3aa/3) |/3/3a/3a) |/3/3/3aa) 

1/10 VlO 1/10 1/10 -/To 1/10 VlO 1/10 \/T0 1/10 vTl) 1/10 -/To 1/10 vTO 1/10 n/10 1/10 vTo 



3/2 



Ill2l3|4|5l 



\al3(3l3f3) \pal3l3l3) \0l3al3fi) \0l3fiafi) |/3/3/3/3a) 

l/5V^ l/5v^ 1/5V^ l/5v^ l/5\/5 



5/2 

m0\0\0\m 



1/3/3/3/3/3) 



Il|2l3|4|5l 



3/2 



-3/2 



|aaaa/3) |aaa/3a) |aQ/3aa) |a/3aaa) |/3aaaa) 

2/5\/5 -l/10\/5 -1/10 \/5 -1/10 V5 -1/lOV^ 

l/2-v/3 -l/6v'3 -l/6v/3 -l/6\/3 

1/3 n/S -1/6 -1/6 V6 

1/2 -1/2 \/2 



-1/2 



\aoia(BP)\ota(5a(5)\aa(50(x) \a(3a(x(5) \<x(3a(3a) \a(5(3a(x) \0aaaf3) |/3aa/3a) \ 

1/10 Vl5 1/10 -/If -1/15 vTS 1/10 Vl5 -1/15 \/T6-l/15 -v/TI 1/10 -/TI -1/15 \/T5-l/15 \/T5-l/15 -/TI 
1/2 -1/6 1/3 -1/6 1/3 -1/3 -1/6 1/3 -1/3 -1/3 

l/3'/2 l/3\/2 -l/6\/2 -l/6\/2 1/6V2 -l/6\/2 -l/6\/2 1/6^2 -l/3\/2 

i/eVe i/eVe 1/6V6 -i/6v^ -i/sVe -i/eVe 



1/2 



|aa/3/3/3> |a/3a/3/3> 

l/15v'T5 I/I5-/T5 l/15-yT5 

1/3 1/3 -1/3 

1/3V^ -1/6V^ 1/6V^ 

1/6 Ve 1/6 Ve 



-1/10 VTE 1/15 %/T5 

1/6 1/3 

1/6 -1/6 v/2 

i/eVe -1/6V6 



|/3a/3a/3> |;9a0/3a> |;9/3aa;9> 

1/15 \/T5 -l/lOvTS 1/15^15 

-1/3 1/6 -1/3 

l/6v^ l/6%/2 -l/3v^ 
-l/6v^ -l/6v'6 



|/3/3a/3a> |/3/3/3aa> 
-1/10 \/T5-l/l0 -/TI 

1/6 -1/2 

-l/3v^ 




3/2 



\a0l300)\0a000) \00a00) 

i/i0\/5 1/ioVE 1/10V5 

1/6 \/3 1/6 \/3 1/6 V3 

1/6 -s/e 1/6 -/e -1/3^/6 
1/2V2 — 1/2V2 



l/3/3/3a/3> 

1/10 %/5 
-1/2 



\0000a) 

~2/b V5 



1/2 



-1/2 



[TT2T3] 



\oLaOL00) \aa0a0) \aa00a) 
1/2 \/2 -1/6V2 -1/6V2 



2/3 



-1/3 



1/3 -^3 



\a0aa0) 
-1/6 V2 

-1/3 
1/3 V3 





\a0a0a) 
-1/6 V2 

1/6 

-1/6 \/3 
-1/6 V3 
1/2 



|a/3/3acK) 
1/6 V2 

-1/6 

-1/6 n/S 
-1/6 
-1/2 



\0aaa0) \0aa0a) 
-1/6V2 -1/6V2 

-1/3 1/6 

-l/3v'3 1/6V3 

-i/eVs 

-1/2 



\0a0aa) \00aaoc) 

1/6 V2 1/6 V2 

-1/6 1/3 

1/6 V3 

-l/6\/3 l/3v^ 
1/2 



1/2 



[TT2|3] 



\aa000) \a0a00) \a00a0) 

1/6 v'2 1/6 n/I -1/6 v/2 



2 4 



1/3 


1/3 




-1/6 1/6 

l/6%/3 1/6V3 

-1/6V3 -l/6\/3 

1/2 -1/2 



\a000a) 

-1/6 n/2 

-1/3 
-1/3 V3 



\0aa00) 

1/6 n/2 

-1/6 
-1/6 V3 
-1/6 V3 

-1/2 



\0a0a0) 

-1/6 v'2 

1/6 
-1/6 V3 

-i/eV3 
1/2 



\0a00a) \00aa0) 

-l/6v'2 -1/6n/2 

-1/3 -1/3 

1/3 V3 

1/3 v'S 





\00a0a) \000aa) 

-l/6\/2 1/2 V2 
2/3 





Table D.4: Schur basis of Hf^ . 
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such states. Bob can identify these states by a measuring the Young diagram and Young tableau since 

Mn{\riil){Tlil\) = 2-^^® \yJ;S)(XJ;i^\- (d.61) 



Asymptotically, the rate at which Alice is able to send classical information to Bob tends to one, 

log2(c„) 1 1 1 / X m co^ 

hm « 1 - — log2(n). (D.62) 

n^oo n Zn 

As an example, consider the Schur basis of five qubits in table ID. 4l Here, C5 = 1 + 4 + 5 = 10 and Alice 
is able to send classical information at a rate « 0.66. 

To transmit quantum information to Bob, Alice encodes the information into the subsystem spanned 
by the {|i^Tn?)}i=i.../ij(s„) with the largest dimension /ij(S„), i.e. she prepares a state 

'^®P= E 'ykk'\wt'^){WI^P\® (D.63) 

k,k' — —j — l 

with arbitrary akk' ■ Bob receives the state 

k=-j i,i' = l ■' 

For large n, /ij(S„) becomes maximal for jmax — \/n/2. Again the rate at which Alice is able to send 
quantum information to Bob asymptotically tends to one, 



lim -^±^JJ^^^±^^ ~^-7r log2(")- (D.65) 

n— >oo n In 

For our example of five qubits, the largest dimension is hx/2(S^) — 5 and Alice is able to send qubits at 
a rate w 0.46. 
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